Vulnerability Details CVE-2006-0920
Oi! Email Marketing System 3.0 (aka Oi! 3) stores the server's FTP password in cleartext on a Configuration web page, which allows local users with superadministrator privileges, or attackers who have obtained access to the web page, to view the password.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 38.9%
CVSS Severity
CVSS v2 Score 1.7
References
- http://securityreason.com/securityalert/483
- http://www.h4cky0u.org/advisories/HYSA-2006-003-oi-email.txt
- http://www.securityfocus.com/archive/1/425924/100/0/threaded
- http://www.securityfocus.com/bid/16794
- http://securityreason.com/securityalert/483
- http://www.h4cky0u.org/advisories/HYSA-2006-003-oi-email.txt
- http://www.securityfocus.com/archive/1/425924/100/0/threaded
- http://www.securityfocus.com/bid/16794
Products affected by CVE-2006-0920
-
cpe:2.3:a:oi:email_marketing_system:3.0