Lucene search
HistoryFeb 28, 2006 - 11:02 a.m.
CVE-2006-0920
cve-2006-0920
oi! 3
email marketing system
ftp password
security vulnerability
cleartext storage
1.7 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:S/C:P/I:N/A:N
6.4 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
0.4%
Oi! Email Marketing System 3.0 (aka Oi! 3) stores the server’s FTP password in cleartext on a Configuration web page, which allows local users with superadministrator privileges, or attackers who have obtained access to the web page, to view the password.
Affected configurations
Node
oiemail_marketing_systemMatch3.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| oi:email_marketing_system | oi email marketing system | eq | 3.0 |
Related
nvd
nvd
CVE-2006-0920
2006-02-28 11:02:00
prion
prion
Default credentials
2006-02-28 11:02:00
cvelist
cvelist
CVE-2006-0920
2006-02-28 11:00:00
1.7 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:S/C:P/I:N/A:N
6.4 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
0.4%
Related for CVE-2006-0920