Bugtraq mailing list archives

Invision Power Board Plaintext Password Disclosure Vuln


From: JeiAr <jeiar () kmfms com>
Date: 25 Apr 2003 20:17:20 -0000



Invision Power Board Plaintext Password Disclosure Vuln
-------------------------------------------------------
Version: All?

Problem: Invision Power Board gives an admin the option
to create a pass protected forum. The problem with this
is that the password is then stored in the cookie fully
readable as it is shown in plaintext.

Credits: All credit goes to JeiAr of GulfTech Computers


Current thread: