Skip to content

CVE-2008-5218 ScriptsEz FREEze Greetings 1.0 stores pwd.txt under the web root with insufficient access control, which allows remote attackers to obtain cleartext passwords.

MediumCVSS 5.0 EPSS 2.7%
Published
Updated
Exploit status
No public exploit known

Description

ScriptsEz FREEze Greetings 1.0 stores pwd.txt under the web root with insufficient access control, which allows remote attackers to obtain cleartext passwords.

Affected products

ProductAffected versionsFixed in
scriptsez freeze greetings = 1.0 No fix listed

References

  • 49883 vdb-entry
  • 32744 third-party-advisory vendor-advisory
  • 4633 third-party-advisory
  • 32325 vdb-entry
  • 7140 exploit