CVE-2007-3357 NetClassifieds Premium Edition does not use encryption for (1) stored passwords or (2) sensitive data, which might allow attackers to obtain information via certain vectors.
HighCVSS 10.0
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
NetClassifieds Premium Edition does not use encryption for (1) stored passwords or (2) sensitive data, which might allow attackers to obtain information via certain vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| scriptdevelopers.net netclassifieds | = 1.0.1 | No fix listed |
References
- 38563 vdb-entry
- 2824 third-party-advisory
- 20070621 NetClassifieds [multiple vulnerabilities] mailing-list
- netclassifieds-password-weak-security(35151) vdb-entry