CVE-2008-7207

RivetTracker before 1.0 stores passwords in cleartext in config.php, which allows local users to discover passwords by reading config.php.

Score

CVSS 2.0 2.1 Low

Status

Modified - cve@mitre.org

Published

2009-09-11

Last modified

2024-09-17

Weaknesses

CWE-310

Affected products

• Rivettracker (Rivetcode)

References

• http://osvdb.org/42433
• http://www.rivetcode.com/files/rivettracker/rivettracker_1-0.zip