Description
The notifyendsubs cron job in Campsite before 2.3.3 sends an e-mail message containing a certain unencrypted MySQL password, which allows remote attackers to sniff the password.
References
- http://sourceforge.net/project/shownotes.php?release_id=367403&group_id=66936
- campsite-notifyendsubs-plaintext-password(23106) vdb-entry
- 20698 vdb-entry
- 17528 third-party-advisory