CVE-2007-5787 Micro Login System 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a file containing a password via a direct request for...
MediumCVSS 5.0
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Micro Login System 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a file containing a password via a direct request for userpwd.txt.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phptoys micro login system | = 1.0 | No fix listed |
References
- 40641 vdb-entry
- 27422 third-party-advisory
- 3328 third-party-advisory
- 20071026 Micro Login System v1.0 (userpwd.txt) Password Disclosure Vulnerability mailing-list
- 26246 vdb-entry