CVE-2006-5018

ContentKeeper 123.25 and earlier stores passwords in cleartext in an INPUT element within cgi-bin/ck/changepw.cgi, enabling remote authenticated users to obtain passwords via that URI. The vuln is exploitable over network with low complexity and requires authentication, leading to partial confide...