Unscored CVE-2002-0933 EUVD-2002-0923GHSA-2623-fqch-p6pf

Datalex PLC BookIt! Consumer before 2.2 stores usernames and passwords in plaintext in a cookie, which could allow remote attackers to gain…

Published Aug 31, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

Datalex PLC BookIt! Consumer before 2.2 stores usernames and passwords in plaintext in a cookie, which could allow remote attackers to gain privileges via Cross-site scripting or sniffing attacks.

References

4972 vdb-entry
20020610 Datalex BookIt! Consumer Password Vulnerabilities mailing-list
bookit-plaintext-passwords(9316) vdb-entry