Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-73x7-f73g-wxcf

Опубликовано: 01 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Scriptsez Smart PHP Subscriber (aka subscribe) stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain encoded passwords via a direct request for pwd.txt.

Scriptsez Smart PHP Subscriber (aka subscribe) stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain encoded passwords via a direct request for pwd.txt.

EPSS

Процентиль: 90%
0.05241
Низкий

Связанные уязвимости

nvd
около 19 лет назад

Scriptsez Smart PHP Subscriber (aka subscribe) stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain encoded passwords via a direct request for pwd.txt.

EPSS

Процентиль: 90%
0.05241
Низкий