WWWBoard stores encrypted passwords in a password file that is under the web root and thus accessible by remote attackers.
Affected Software
Name |
Vendor |
Start Version |
End Version |
Wwwboard |
Matt_wright |
2.0_alpha_2.1 (including) |
2.0_alpha_2.1 (including) |
References