Improper access control

2008-12-3020:30:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.7%

JSON

Simple Text-File Login Script (SiTeFiLo) 1.0.6 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the password via a direct request for slog_users.txt.

CPENameOperatorVersion
simple_text-file_login_scripteq1.0.6

CPE	Name	Operator	Version
	simple_text-file_login_script	eq	1.0.6

References

osvdb.org/50712

secunia.com/advisories/33110

securityreason.com/securityalert/4847

www.exploit-db.com/exploits/7444