PT-2002-2860 · Mysimple · Mysimplenews

Published 2002-12-31 · Updated 2008-09-05 · CVE-2002-2143

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: MySimple News version 1.0

Description: The issue concerns the storage of the administrative password in plaintext within the admin.html file, allowing remote attackers to gain unauthorized access to the web server by viewing the source of the admin.html file.

Recommendations: For MySimple News version 1.0, consider modifying the admin.html file to store the administrative password securely, such as hashing and salting, to prevent unauthorized access. As a temporary workaround, restrict access to the admin.html file to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2002-2143

Affected Products

Mysimplenews

References · 5

• 🔥 https://exploit-db.com/exploits/21901 · Exploit
• 🔥 http://securityfocus.com/bid/5866 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-2143 · Security Note
• http://iss.net/security_center/static/10298.php · Note
• http://securityfocus.com/archive/1/293871 · Note