← All advisories

Unrated severityNVD Advisory· Published Sep 11, 2009· Updated Jun 16, 2026

CVE-2008-7207

CVE-2008-7207

Description

RivetTracker before 1.0 stores passwords in cleartext in config.php, which allows local users to discover passwords by reading config.php.

Affected products

3

Rivetcode/Rivettracker2 versions
cpe:2.3:a:rivetcode:rivettracker:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:rivetcode:rivettracker:*:*:*:*:*:*:*:*range: <=0.8
- cpe:2.3:a:rivetcode:rivettracker:0.1:*:*:*:*:*:*:*
RivetTracker/RivetTrackerllm-create
Range: <1.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.