WWWBoard stores encrypted passwords in a password file that is under the web root and thus accessible by remote attackers.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|
| Wwwboard | Matt_wright | 2.0_alpha_2.1 (including) | 2.0_alpha_2.1 (including) |
References