Dayfox Blog 2.0 and earlier stores user credentials in edit/slog_users.txt under the web document root with insufficient access control, which allows remote attackers to gain privileges.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Dayfox_blog | Dayfox_designs | * | 2.0 (including) |