CVE-2009-0964 - UserView_list.php in PHPRunner 4.2, and possibly earlier, stores passwords in cleartext in the datab

CVE-2009-0964

Summary

UserView_list.php in PHPRunner 4.2, and possibly earlier, stores passwords in cleartext in the database, which allows attackers to gain privileges. NOTE: this can be leveraged with a separate SQL injection vulnerability to obtain passwords remotely without authentication.

References

Vulnerable Configurations

cpe:2.3:a:xlinesoft:phprunner:*:*:*:*:*:*:*:*
cpe:2.3:a:xlinesoft:phprunner:*:*:*:*:*:*:*:*

CVSS

Base:	5.0 (as of 14-02-2024 - 15:19)
Impact:
Exploitability:

CWE

CWE-312

CAPEC

Retrieve Embedded Sensitive Data
An attacker examines a target system to find sensitive data that has been embedded within it. This information can reveal confidential contents, such as account numbers or individual keys/credentials that can be used as an intermediate step in a larger attack.

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	NONE	NONE

cvss-vector via4

AV:N/AC:L/Au:N/C:P/I:N/A:N

refmap via4

bugtraq	20090317 PHPRunner SQL Injection
exploit-db	8226
misc	http://www.bugreport.ir/index_63.htm
osvdb	52804
vupen	ADV-2009-0750
xf	phprunner-userview-information-disclosure(49279)

Last major update

14-02-2024 - 15:19

Published

19-03-2009 - 10:30

Last modified

14-02-2024 - 15:19