Noah Medling RCBlog 1.03 stores the data and config directories under the web root with insufficient access control, which allows remote attackers to view account names and MD5 password hashes.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Rcblog | Noah_medling | 1.03 (including) | 1.03 (including) |