Vulnerabilities > CVE-2008-0724 - Credentials Management vulnerability in the Everything Development Company the Everything Development Engine

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
the-everything-development-company
CWE-255
exploit available
NVD
Published: 2008-02-12
Updated: 2018-10-15

Summary

The Everything Development Engine in The Everything Development System Pre-1.0 and earlier stores passwords in cleartext in a database, which makes it easier for context-dependent attackers to obtain access to user accounts.

Vulnerable Configurations

Part Description Count
Application
The_Everything_Development_Company
1

Common Weakness Enumeration (CWE)

Exploit-Db

descriptionThe Everything Development System <= Pre-1.0 SQL Injection Vuln. CVE-2008-0675,CVE-2008-0724. Webapps exploit for php platform
fileexploits/php/webapps/5037.txt
idEDB-ID:5037
last seen2016-01-31
modified2008-02-02
platformphp
port
published2008-02-02
reportersub
sourcehttps://www.exploit-db.com/download/5037/
titleThe Everything Development System <= Pre-1.0 - SQL Injection Vuln
typewebapps

References