← Database

CVE-2008-2279

MEDIUM CVSS: 5.0 Published: 2008-05-16 Modified: 2026-06-16

Description

Freelance Auction Script 1.0 stores user passwords in plaintext in the tbl_users table, which allows attackers to gain privileges by reading the table.

Affected Platforms

Freelance Auction Freelance Auction Script

Weakness Type

CWE-255

References