high7.5Public exploit code
CVE-2002-2143
The admin.html file in MySimple News 1.0 stores its administrative password in plaintext, which allows remote attackers to gain unauthorized access to the web …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- MySimpleNews 1.0 - Remote Readable Administrator Password2002-10-02 · webapps · php · Verified
Impact
The admin.html file in MySimple News 1.0 stores its administrative password in plaintext, which allows remote attackers to gain unauthorized access to the web server by viewing the source of admin.html.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mysimplenews | Mysimplenews | Version 1.0 |