Description
TowerBlog 0.6 and earlier stores the login data file under the web root, which allows remote attackers to obtain the MD5 checksums of the username and password via a direct request to the _dat/login file.
References
- 14884 third-party-advisory
- 20050410 TowerBlog <= 0.6 Admin Account View [x0n3-h4ck] mailing-list
- 1013675 vdb-entry
- 15425 vdb-entry
- towerblog-datlogin-information-disclosure(20039) vdb-entry