high7.8Public exploit code
CVE-2020-11560
NCH Express Invoice 7.25 allows local users to discover the cleartext password by reading the configuration file.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- NCH Express Invoice - Clear Text Password Storage and Account Takeover2023-06-23 · local · windows
Impact
NCH Express Invoice 7.25 allows local users to discover the cleartext password by reading the configuration file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nchsoftware | Express Invoice | Version 7.25 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/173117/NCH-Express-Invoice-7.25-Cleartext-Password.html
- https://tejaspingulkar.blogspot.com/2020/03/cve-cve-2020-11560-title-clear-text.html
- https://www.youtube.com/watch?v=V0BWq33qVCs&feature=youtu.be
- http://packetstormsecurity.com/files/173117/NCH-Express-Invoice-7.25-Cleartext-Password.html
- https://tejaspingulkar.blogspot.com/2020/03/cve-cve-2020-11560-title-clear-text.html
- https://www.youtube.com/watch?v=V0BWq33qVCs&feature=youtu.be