Oi! Email Marketing System 3.0 (aka Oi! 3) stores the servers FTP password in cleartext on a Configuration web page, which allows local users with superadministrator privileges, or attackers who have obtained access to the web page, to view the password.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Email_marketing_system | Oi | 3.0 (including) | 3.0 (including) |