FTGateOffice/FTGatePro version 1.2 suffers from path exposure, cross site scripting, and validation errors.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33077/ftgate.txt
Source: https://packetstormsecurity.com/files/33077/ftgate.txt.html