The phpmyadmin subsystem in AlternC 0.9.5 and earlier transmits the SQL password in cleartext in a cookie, which might allow remote attackers to obtain the password by sniffing or by conducting a cross-site scripting (XSS) attack.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Alternc | Alternc | * | 0.9.5 (including) |