CVE-2006-0920 - Oi! Email Marketing System 3.0 (aka Oi! 3) stores the server's FTP password in cleartext on a Configuration web page, which allows local users with superadministrator privileges, or attackers who have obtained access to the web page, to view the password

Back Back to CVE browser

LOW

Oi! Email Marketing System 3.0 (aka Oi! 3) stores the server's FTP password in cleartext on a Configuration web page, which allows local users with superadministrator privileges, or attackers who have obtained access to the web page, to view the password

Published Feb 28, 2006

1.7

LOW

CVSS 2.0

EPSS 0.79%

Description

Oi! Email Marketing System 3.0 (aka Oi! 3) stores the server's FTP password in cleartext on a Configuration web page, which allows local users with superadministrator privileges, or attackers who have obtained access to the web page, to view the password.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (5)

http://securityreason.com/securityalert/483
third-party-advisoryx_refsource_SREASON
http://www.h4cky0u.org/advisories/HYSA-2006-003-oi-email.txt
x_refsource_MISCExploitVendor Advisory
http://www.securityfocus.com/archive/1/425924/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/16794
vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-0924
Advisory

Link	Providers	Tags
http://securityreason.com/securityalert/483		third-party-advisoryx_refsource_SREASON
http://www.h4cky0u.org/advisories/HYSA-2006-003-oi-email.txt		x_refsource_MISCExploitVendor Advisory
http://www.securityfocus.com/archive/1/425924/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/16794		vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-0924		Advisory