RivetTracker before 1.0 stores passwords in cleartext in config.php, which allows local users to discover passwords by reading config.php.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Rivettracker | Rivetcode | * | 0.8 (including) |
| Rivettracker | Rivetcode | 0.1 (including) | 0.1 (including) |