CVE-2007-5787: Undefined Security Weakness

Micro Login System 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a file containing a password via a direct request for userpwd.txt...

mls-disclose.txt

Micro Login System v1.0 userpwd.txt Password Disclosure Vulnerability Affected Software: Micro Login System v1.0 Download: http://www.hotscripts.com/jump.php?listingid=67504&jumptype=1 Bugfounder: 0x90 Contact: Gunsat0x90dotcomdotar homepage: WwW.0x90.CoM.Ar +Exploit: http://target/path/userpwd.t...

Micro Login System v1.0 (userpwd.txt) Password Disclosure Vulnerability

Micro Login System v1.0 userpwd.txt Password Disclosure Vulnerability Affected Software: Micro Login System v1.0 Download: http://www.hotscripts.com/jump.php?listingid=67504&jumptype=1 Bugfounder: 0x90 Contact: Gunsat0x90dotcomdotar homepage: WwW.0x90.CoM.Ar +Exploit: http://target/path/userpwd.t...

Information disclosure

include/auth/auth.php in Simple Invoices before 2007 03 05 does not use the login system to protect print preview pages for invoices, which might allow attackers to obtain sensitive information...

CVE-2007-1341

include/auth/auth.php in Simple Invoices before 2007 03 05 does not use the login system to protect print preview pages for invoices, which might allow attackers to obtain sensitive information...

CVE-2024-50341: Security::login does not take into account custom user_checker

More info at https://symfony.com/cve-2024-50341...