Description
Autogalaxy stores usernames and passwords in cleartext in cookies, which makes it easier for remote attackers to obtain authentication information and gain unauthorized access via sniffing or a cross-site scripting attack.
References
- audiogalaxy-plaintext-password(7621) vdb-entry
- 20011127 Audiogalaxy again mailing-list
- 3587 vdb-entry