CVE-2002-1939: Flashfxp

Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days.

FlashFXP 1.4 prints FTP passwords in plaintext when there are transfers in the queue, which allows attackers to obtain FTP passwords of other users by editing the queue properties.

Affected products

• Flashfxp Flashfxp: version 1.4 only

Published 2002-12-31. Last modified 2026-06-16.