easyNews 1.5 and earlier stores administration passwords in cleartext in settings.php, which allows local users to obtain the passwords and gain access.
References
Configurations
History
20 Nov 2024, 23:37
Type | Values Removed | Values Added |
---|---|---|
References | () http://archives.neohapsis.com/archives/bugtraq/2001-12/0000.html - | |
References | () http://www.iss.net/security_center/static/7659.php - |
Information
Published : 2001-12-31 05:00
Updated : 2024-11-20 23:37
NVD link : CVE-2001-1527
Mitre link : CVE-2001-1527
CVE.ORG link : CVE-2001-1527
JSON object : View
Products Affected
easyscripts
- easynews
CWE