CVE-2018-10814

SynaMan 4.0 build 1488 is affected by a vulnerability where SMTP credentials are stored in plaintext, enabling information disclosure. The root cause is cleartext password storage in the configuration file (AppConfig.xml), which local users can read, leading to potential compromise of the SMTP ac...

SynaMan 4.0 build 1488 - SMTP Credential Disclosure

Exploit Author: bzyo CVE: CVE-2018-10814 Twitter: @bzyo Exploit Title: SynaMan 4.0 - Cleartext password SMTP settings Date: 09-12-18 Vulnerable Software: SynaMan 4.0 build 1488 Vendor Homepage: http://web.synametrics.com/SynaMan.htm Version: 4.0 build 1488 Software Link:...

SynaMan 40 Build 1488 SMTP Credential Disclosure

Exploit Author: bzyo CVE: CVE-2018-10814 Twitter: @bzyo Exploit Title: SynaMan 4.0 - Cleartext password SMTP settings Date: 09-12-18 Vulnerable Software: SynaMan 4.0 build 1488 Vendor Homepage: http://web.synametrics.com/SynaMan.htm Version: 4.0 build 1488 Software Link:...