PCCS MySQLDatabase Admin Tool Manager 1.2.4 and earlier installs the file dbconnect.inc within the web root, which allows remote attackers to obtain sensitive information such as the administrative password.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Mysqldatabase_admin_tool | Pccs-linux | 1.2.3 (including) | 1.2.3 (including) |
Mysqldatabase_admin_tool | Pccs-linux | 1.2.4 (including) | 1.2.4 (including) |