Bugtraq mailing list archives

Plaintext Vulnerability in Alan Ward Acart


From: <parag0d () phreaker net>
Date: 4 Dec 2003 06:08:08 -0000



Vulnerability:  Plaintext Vulnerability

Description:    All of the data in this database is stored in plain text (not encrypted), including usernames, 
passwords, credit card numbers, addresses, etc.  Many times the database is placed into a web accessible folder (by 
default)

Exploit:        None Required

Solution:       The developer needs to implement some type of encryption standard in order to protect the data stored 
in the database.  

Credit: CyberArmy Application and Code Auditing Team
        Parag0d


The developer was contacted about this matter, but never gave any response


Current thread: