rivettracker <=1.03 Multiple SQL injection

Exploit for php platform in category web applications Exploit Title: Multiple SQL injections in rivettracker =5.3.4 and backports we still have arbitary SQL queries but no config.php. config.php contai...

Rivettracker 1.03 - Multiple SQL Injections

Exploit Title: Multiple SQL injections in rivettracker =5.3.4 and backports we still have arbitary SQL queries but no config.php. config.php contains passwords and usernames for admin, user and mysql database. Other fil...

Default credentials

RivetTracker before 1.0 stores passwords in cleartext in config.php, which allows local users to discover passwords by reading config.php...

CVE-2008-7207

RivetTracker before 1.0 stores passwords in cleartext in config.php, which allows local users to discover passwords by reading config.php...

CVE-2008-7207

CVE-2008-7207 involves RivetTracker before 1.0, where passwords are stored in cleartext in config.php. The underlying issue is cleartext credential storage, enabling local users to read passwords by accessing config.php. Exploitation details are not provided in the documents, and there is no expl...

CVE-2008-7207

RivetTracker before 1.0 stores passwords in cleartext in config.php, which allows local users to discover passwords by reading config.php...

CVE-2008-7207: Undefined Security Weakness

RivetTracker before 1.0 stores passwords in cleartext in config.php, which allows local users to discover passwords by reading config.php...