Vulnerability Details CVE-2002-1800
phpRank 1.8 stores the administrative password in plaintext on the server and in the "ap" cookie, which allows remote attackers to retrieve the administrative password.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 62.3%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
- http://archives.neohapsis.com/archives/bugtraq/2002-10/0148.html
- http://www.iss.net/security_center/static/10352.php
- http://www.securityfocus.com/bid/5947
- http://archives.neohapsis.com/archives/bugtraq/2002-10/0148.html
- http://www.iss.net/security_center/static/10352.php
- http://www.securityfocus.com/bid/5947