Unscored CVE-2006-3834 EUVD-2006-3828GHSA-7q2q-33rm-52hm

EJ3 TOPo 2.2.178 includes the password in cleartext in the ID field to index.php, which allows context-dependent attackers to obtain entry …

Published Jul 25, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

EJ3 TOPo 2.2.178 includes the password in cleartext in the ID field to index.php, which allows context-dependent attackers to obtain entry passwords via log files, referrers, or other vectors.

References

1279 third-party-advisory
20060712 TOPo v.2.2.178 Account Reset mailing-list