Description
Invision Power Services Invision Board 1.0 through 1.1.1, when a forum is password protected, stores the administrator password in a cookie in plaintext, which could allow remote attackers to gain access.
References
- invision-admin-plaintext-password(11871) vdb-entry
- 7440 vdb-entry
- 20030425 Invision Power Board Plaintext Password Disclosure Vuln mailing-list
- 3276 third-party-advisory