CVE-2008-2279

Published May 16, 2008 CVSS 2.0 · 5.0 Medium EPSS 2.3% KEV · Not listed
Description
Freelance Auction Script 1.0 stores user passwords in plaintext in the tbl_users table, which allows attackers to gain privileges by reading the table.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2008-2276 Freelance Auction Script 1.0 stores user passwords in plaintext in the tbl_users table, which allows attackers to gain privileges by reading the table.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 8:58 AM
Reserved
May 16, 2008, 12:00 AM
Status
Modified
Published
May 16, 2008, 12:54 PM
Modified
Jun 16, 2026, 10:53 PM