An issue was discovered in New Media Smarty before 9.10. Passwords are stored in the database in an obfuscated format that can be easily reversed. The file data.mdb contains these obfuscated passwords in the second column. NOTE: this is unrelated to the popular Smarty template engine product.
View Full Alert
Related Posts
CVE-2020-10936Sympa before 6.2.56 allows privilege escalation. View Full Alert
CVE-2020-10945Centreon before 19.10.7 exposes Session IDs in server responses. View Full Alert
CVE-2020-13168SysAid 20.1.11b26 allows reflected XSS via the ForgotPassword.jsp accountid parameter. View Full Alert