Freelance Auction Script 1.0 stores user passwords in plaintext in the tbl_users table, which allows attackers to gain privileges by reading the table.
References
Configurations
Information
Published : 2008-05-16 05:54
Updated : 2017-09-28 18:31
NVD link : CVE-2008-2279
Mitre link : CVE-2008-2279
JSON object : View
CWE
CWE-255
Credentials Management Errors
Products Affected
freelance_auction
- freelance_auction_script