Vulnerabilities > CVE-2008-0724 - Credentials Management vulnerability in the Everything Development Company the Everything Development Engine

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
the-everything-development-company
CWE-255
exploit available
NVD
Published: 2008-02-12
Updated: 2018-10-15

Summary

The Everything Development Engine in The Everything Development System Pre-1.0 and earlier stores passwords in cleartext in a database, which makes it easier for context-dependent attackers to obtain access to user accounts.

Vulnerable Configurations

Part Description Count
Application
The_Everything_Development_Company
1

Common Weakness Enumeration (CWE)

Exploit-Db

descriptionThe Everything Development System <= Pre-1.0 SQL Injection Vuln. CVE-2008-0675,CVE-2008-0724. Webapps exploit for php platform
fileexploits/php/webapps/5037.txt
idEDB-ID:5037
last seen2016-01-31
modified2008-02-02
platformphp
port
published2008-02-02
reportersub
sourcehttps://www.exploit-db.com/download/5037/
titleThe Everything Development System <= Pre-1.0 - SQL Injection Vuln
typewebapps

References