VYPR

Smart PHP Subscriber

by Scriptsez

CVEs (1)

  • CVE-2007-0518Jan 26, 2007
    risk 0.03cvss —epss 0.02

    Scriptsez Smart PHP Subscriber (aka subscribe) stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain encoded passwords via a direct request for pwd.txt.