PT-2002-2522 · Phprank · Phprank

Published 2002-12-31 · Updated 2024-02-10 · CVE-2002-1800

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions phpRank version 1.8

Description The issue allows remote attackers to retrieve the administrative password because it is stored in plaintext on the server and in the ap cookie.

Recommendations For phpRank version 1.8, consider disabling the use of the ap cookie or restricting access to the administrative interface until a secure method of storing passwords is implemented. Avoid using plaintext storage for sensitive information like administrative passwords.

Fix

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

CVE-2002-1800

Affected Products

Phprank

References · 5

• http://archives.neohapsis.com/archives/bugtraq/2002-10/0148.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-1800 · Security Note
• http://securityfocus.com/bid/5947 · Note
• https://t.me/cvenotify/70920 · Telegram Post
• http://iss.net/security_center/static/10352.php · Note