SimplePHPBlog 0.4.0 stores password hashes in config/password.txt with insufficient access control, which allows remote attackers to obtain passwords via a brute force attack.
References
Configurations
Information
Published : 2005-07-10 21:00
Updated : 2016-10-17 20:25
NVD link : CVE-2005-2192
Mitre link : CVE-2005-2192
JSON object : View
CWE
Products Affected
alexander_palmo
- simple_php_blog