Description
phpRank 1.8 stores the administrative password in plaintext on the server and in the "ap" cookie, which allows remote attackers to retrieve the administrative password.
References
- 5947 vdb-entry
- phprank-admin-plaintext-password(10352) vdb-entry
- 20021010 Multiple vulnerabilities in phpRank mailing-list