Lucene search
PRIOn knowledge basePRION:CVE-2009-0964HistoryMar 19, 2009 - 10:30 a.m.
Sql injection
2009-03-1910:30:00
PRIOn knowledge base
www.prio-n.com
5
UserView_list.php in PHPRunner 4.2, and possibly earlier, stores passwords in cleartext in the database, which allows attackers to gain privileges. NOTE: this can be leveraged with a separate SQL injection vulnerability to obtain passwords remotely without authentication.
Related
cve
cve
CVE-2009-0964
2009-03-19 10:30:00
cvelist
cvelist
CVE-2009-0964
2009-03-19 10:00:00
nvd
nvd
CVE-2009-0964
2009-03-19 10:30:00
seebug
seebug
PHPRunner SearchField参数SQL注入漏洞
2009-03-23 00:00:00