Vulnerabilities

TI-2008-05469 CVE-2008-5763 · GHSA-93f3-c68j-fw9c

PHP remote file inclusion vulnerability in slogin_lib.inc.php in Simple Text-File Login…

MEDIUM 60

PHP remote file inclusion vulnerability in slogin_lib.inc.php in Simple Text-File Login Script (SiTeFiLo) 1.0.6 allows remote attackers to execute arbitrary PHP code via a URL in the slogin_path parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.39211 Published 2008-12-30 No fix listed CWE-94

TI-2008-05468 CVE-2008-5762 · GHSA-wp9v-5956-j972

Simple Text-File Login Script (SiTeFiLo) 1.0.6 stores sensitive information under the web…

LOW 28

Simple Text-File Login Script (SiTeFiLo) 1.0.6 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the password via a d…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02615 Published 2008-12-30 No fix listed CWE-264

Vulnerabilities

Filters

PHP remote file inclusion vulnerability in slogin_lib.inc.php in Simple Text-File Login…

Simple Text-File Login Script (SiTeFiLo) 1.0.6 stores sensitive information under the web…