CVE-2008-5693: Ipswitch Ws FTP

Medium severity, CVSS 5.0. EPSS: 4.5% chance of exploitation in the next 30 days.

Ipswitch WS_FTP Server Manager 6.1.0.0 and earlier, and possibly other Ipswitch products, might allow remote attackers to read the contents of custom ASP files in WSFTPSVR/ via a request with an appended dot character.

Affected products

• Ipswitch Ws FTP: up to and including 6.1; version 1.0.5 only; version 2.01 only; version 2.02 only; version 2.03 only; version 3.0 only; …

Published 2008-12-19. Last modified 2026-06-16.