CVE-2007-3357

NetClassifieds Premium Edition does not use encryption for (1) stored passwords or (2) sensitive data, which might allow attackers to obtain information via certain vectors.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2007-06-22

Last modified

2024-08-07

Affected products

• Netclassifieds (Scriptdevelopers.net)

References

• http://osvdb.org/38563
• http://securityreason.com/securityalert/2824
• http://www.securityfocus.com/archive/1/471944/100/0/threaded
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35151