CVE-2003-1454

Affected software: Invision Board 1.0–1.1.1. Vulnerability: when a forum is password protected, the administrator password is stored in plaintext in a cookie, risking unauthorized access. Impact: potential remote access by attackers due to cookie exposure. Root cause: insecure handling of session...