9119 matches found
CVE-2005-3429
Rockliffe MailSite Express before 6.1.22 stores user passwords in plaintext in cookies when the “save login information” option is enabled. This enables local users to read cookies to obtain passwords and allows remote attackers to steal cookies via cross-site scripting (XSS) vulnerabilities. Aff...
CVE-2004-2524
CVE-2004-2524 affects Benchmark Designs’ WHM AutoPilot 2.4.5 and earlier. The vulnerability arises when clogin.php uses clogin_e and base64_encode to encode the target user ID in the c parameter, allowing remote attackers to read plaintext usernames and passwords from the resulting form. The desc...
CVE-2004-2524
clogin.php in Benchmark Designs' WHM AutoPilot 2.4.5 and earlier allows remote attackers to obtain plaintext username and password credentials by using the clogine and base64encode functions to encode the desired user ID in the c parameter, then read the plaintext values in the resulting form...
CVE-2005-3209
Aenovo products 1 aeNovo, 2 aeNovoShop, and 3 aeNovoWYSI store password information in plaintext in the a control, b content, and c page tables, which allows attackers with database access to obtain those passwords and gain privileges...
CVE-2005-3203
The manual installation of Oracle HTML DB HTMLDB 1.3 through 1.3.6 stores the SYS password in install.lst in plaintext, which allows local users to gain privileges...
CVE-2005-3209
CVE-2005-3209 affects Aenovo products (aeNovo, aeNovoShop, aeNovoWYSI). The issue is that password data is stored in plaintext in the control, content, and page tables, facilitating password disclosure for attackers who have database access and enabling privilege escalation. The provided document...
CVE-2005-3203
The CVE-2005-3203 entry concerns Oracle HTML DB (HTMLDB) versions 1.3 through 1.3.6. The issue, as described, is that the SYS password is stored in plaintext in install.lst during manual installation, which allows local users to gain privileges. This is a local-privilege escalation risk affecting...
CVE-2005-3203
The manual installation of Oracle HTML DB HTMLDB 1.3 through 1.3.6 stores the SYS password in install.lst in plaintext, which allows local users to gain privileges...
CVE-2005-3209
Aenovo products 1 aeNovo, 2 aeNovoShop, and 3 aeNovoWYSI store password information in plaintext in the a control, b content, and c page tables, which allows attackers with database access to obtain those passwords and gain privileges...
[Full-disclosure] Plaintext Password Vulnerabilitiy during Installation of Oracle HTMLDB
Plaintext Password Vulnerabilitiy during Installation of Oracle HTMLDB Name Cross-Site-Scripting Vulnerabilities in Oracle XMLDB Systems Affected Oracle HTMLDB Severity Low Risk Category Plaintext Password of SYS is logged during Installation of HTMLDB Vendor URL http://www.oracle.com This adviso...
CVE-2005-3112
The "reset password" feature in Macromedia Breeze 5.0 stores passwords in plaintext in the database instead of the hash, which allows attackers with access to the database to obtain the passwords...
CVE-2005-3112
CVE-2005-3112 affects Macromedia Breeze 5.0: the reset password feature stores passwords in plaintext in the database instead of hashing. This allows anyone with database access to obtain user passwords. The provided documents do not specify exploit details, affected versions beyond Breeze 5.0, o...
CVE-2005-3112
The "reset password" feature in Macromedia Breeze 5.0 stores passwords in plaintext in the database instead of the hash, which allows attackers with access to the database to obtain the passwords...
CVE-2005-3036
File Transfer Anywhere 3.01 stores sensitive password information in plaintext in the PASS value in the "File Transfer Anywhere" registry key, which allows local users to gain privileges...
CVE-2005-3036
CVE-2005-3036 affects File Transfer Anywhere 3.01, where a sensitive password is stored in plaintext in the PASS value of the program’s registry key. The root cause is plaintext credential storage in the registry, enabling local users to gain privileges. Impact: local privilege escalation as desc...
CVE-2005-3036
File Transfer Anywhere 3.01 stores sensitive password information in plaintext in the PASS value in the "File Transfer Anywhere" registry key, which allows local users to gain privileges...
CVE-2005-2866
Mercora IMRadio 4.0.0.0 stores usernames and passwords in plaintext in the MercoraClient\Profiles registry key, which allows local users to gain privileges...
CVE-2005-2868
ZipTorrent 1.3.7.3 stores sensitive information in plaintext in the pref.txt file, which allows local users to obtain sensitive information such as proxy server information and passwords...