Description
myPhile 1.2.1 allows remote attackers to bypass authentication via an empty password. NOTE: some of these details are obtained from third party information.
References
- myphile-password-security-bypass(54350) vdb-entry
- 37322 third-party-advisory
- http://companionway.net/files/myphile/
- ADV-2009-3289 vdb-entry