Vulnerabilities > Phpgroupware > Phpgroupware > 0.9.2

DATE CVE VULNERABILITY TITLE RISK
2004-12-31 CVE-2004-2578 Information Disclosure vulnerability in PHPGroupWare Plaintext Cookie Authentication Credentials
phpGroupWare before 0.9.16.002 transmits the (1) header admin and (2) setup passwords in plaintext via cookies, which allows remote attackers to sniff passwords.
network
low complexity
phpgroupware
5.0