CVE-2005-2314

CVE-2005-2314 describes a critical authentication bypass vulnerability in PHPsFTPd versions 0.2 through 0.4. Remote attackers can exploit this flaw by manipulating the do_login parameter and an edit action in user.php, allowing them to bypass the login check and retrieve the administrator's username and password directly from the server response. With a CVSS score of 7.5, this vulnerability is easily exploitable over the network with low complexity, potentially leading to full compromise of the FTP server. There is no evidence of active exploitation, nor are there publicly available exploit modules or significant community discussion surrounding this nearly two-decade-old vulnerability.