Description
easyNews 1.5 and earlier stores administration passwords in cleartext in settings.php, which allows local users to obtain the passwords and gain access.
References
- easynews-php-admin-passwd(7659) vdb-entry
- 20011201 easynews 1.5 let's remote users modify database mailing-list