VYPR

Smart PHP Subscriber

by Scriptsez

CVEs (1)

  • CVE-2007-0518Jan 26, 2007
    risk 0.03cvss epss 0.05

    Scriptsez Smart PHP Subscriber (aka subscribe) stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain encoded passwords via a direct request for pwd.txt.