CVE-2001-1527 easyNews 1.5 and earlier stores administration passwords in cleartext in settings.php, which allows local users to obtain the passwords and gain access.
LowCVSS 2.1
EPSS 0.31%
- Published
- Updated
- Exploit status
- No public exploit known
Description
easyNews 1.5 and earlier stores administration passwords in cleartext in settings.php, which allows local users to obtain the passwords and gain access.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| easyscripts easynews | = 1.5 | No fix listed |
References
- 20011201 easynews 1.5 let's remote users modify database mailing-list
- easynews-php-admin-passwd(7659) vdb-entry