Description
wcSimple Poll stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain password hashes via a direct request for password.txt.
References
- 20070114 wcSimple Poll (password.txt) Remote Password Disclosure Vulnerablity mailing-list
- 2157 third-party-advisory
- 33539 vdb-entry