Description
cosmoshop 8.10.78 and earlier stores passwords in plaintext in the database, which allows local users to obtain sensitive information.
References
- 16625 third-party-advisory
- 20050829 [cosmoshop <= 8.10.78] be the shopadmin in one step mailing-list
- cosmoshop-plaintext-password(22081) vdb-entry