[29910] in bugtraq
Invision Power Board Plaintext Password Disclosure Vuln
daemon@ATHENA.MIT.EDU (JeiAr)
Fri Apr 25 17:24:49 2003
Date: 25 Apr 2003 20:17:20 -0000
Message-ID: <20030425201720.23014.qmail@www.securityfocus.com>
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: binary
MIME-Version: 1.0
From: JeiAr <jeiar@kmfms.com>
To: bugtraq@securityfocus.com
Invision Power Board Plaintext Password Disclosure Vuln
-------------------------------------------------------
Version: All?
Problem: Invision Power Board gives an admin the option
to create a pass protected forum. The problem with this
is that the password is then stored in the cookie fully
readable as it is shown in plaintext.
Credits: All credit goes to JeiAr of GulfTech Computers
