CVE-2008-2279

2008-05-1610:00:00

mitre

www.cve.org

6.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.7%

JSON

Freelance Auction Script 1.0 stores user passwords in plaintext in the tbl_users table, which allows attackers to gain privileges by reading the table.

References

exchange.xforce.ibmcloud.com/vulnerabilities/42426

www.exploit-db.com/exploits/5613