CVE-2005-0823 ThePoolClub (1) iPool and (2) iSnooker 1.6.81 and earlier stores usernames and passwords in cleartext in the MyDetails.txt file, which allows local users to gain privileges.
MediumCVSS 4.6
EPSS 1.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
ThePoolClub (1) iPool and (2) iSnooker 1.6.81 and earlier stores usernames and passwords in cleartext in the MyDetails.txt file, which allows local users to gain privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| thepoolclub ipool | <= 1.6.81 | No fix listed |
| thepoolclub isnooker | <= 1.6.8 | No fix listed |
References
- 14629 third-party-advisory
- 1013458 exploit vdb-entry
- 1013459 exploit vdb-entry
- 12830 exploit vdb-entry
- ipool-mydetails-plaintext-password(19717) vdb-entry
- isnooker-mydetails-plaintext-password(19718) vdb-entry