CVE-2005-1092: Light Speed Technology Deluxeftp

High severity, CVSS 7.2. EPSS: 0.9% chance of exploitation in the next 30 days.

Lightspeed DeluxeFTP 6.01 stores usernames and passwords in plaintext in sites.xml, which is world-readable, which allows local users to gain privileges.

Affected products

• Light Speed Technology Deluxeftp: version 6.0.1 only; version 7.0.1_beta only

Published 2005-05-02. Last modified 2026-06-16.