VYPR

Chatness

by WiredPHP

CVEs (1)

  • CVE-2007-2149Apr 19, 2007
    risk 0.03cvss epss 0.03

    Stephen Craton (aka WiredPHP) Chatness 2.5.3 and earlier stores usernames and unencrypted passwords in (1) classes/vars.php and (2) classes/varstuff.php, and recommends 0666 or 0777 permissions for these files, which allows local users to gain privileges by reading the files,…