Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Myphpscripts Component: Login Session Clear all filters
TI-2008-05551 CVE-2008-5855 · GHSA-rw6m-vgvc-h948

myPHPscripts Login Session 2.0 stores sensitive information under the web root with…

Priority LOW 28

myPHPscripts Login Session 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to discover usernames, e-mail addresses, and password hashes via a direct req…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02615 Published 2009-01-06 No fix listed CWE-264