 |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
| Test ID: | 1.3.6.1.4.1.25623.1.0.12283 |
| Category: | Web application abuses |
| Title: | Singapore MD5 Administrative Password Disclosure |
| Summary: | Singapore is a PHP based photo gallery web application.;; Due to inaddequate security settings, the file used to stored the administrative password; is easily accessible, and the MD5 with which the product protects the password is feasibably; crackable. |
| Description: | Summary: Singapore is a PHP based photo gallery web application. Due to inaddequate security settings, the file used to stored the administrative password is easily accessible, and the MD5 with which the product protects the password is feasibably crackable. Solution: Use the web site's ACL to deny access to the file adminusers.csv. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C |
| Copyright | Copyright (C) 2004 Noam Rathaus |
| This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below. |