CVEvulnerability
CVE-2007-5431
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-10-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.8 HIGH — AV:N/AC:L/Au:N/C:C/I:N/A:N
- Weaknesses
- CWE-200
Description
include/imageupload.js in the MyFTPUploader module in Stride 1.0 contains sensitive information including FTP login credentials, which might allow remote attackers to gain unauthorized access to the FTP server being used by the module by viewing the source code.
Affected configurations
• javaatwork myftpuploader module
• scottmanktelow stride 1.0
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://osvdb.org/45487 osvdb.org
- http://securityreason.com/securityalert/3216 securityreason.com
- http://securityvulns.ru/Sdocument4.html Exploit
- http://www.securityfocus.com/archive/1/482006/100/0/threaded www.securityfocus.com
- http://osvdb.org/45487 osvdb.org
- http://securityreason.com/securityalert/3216 securityreason.com
- http://securityvulns.ru/Sdocument4.html Exploit
- http://www.securityfocus.com/archive/1/482006/100/0/threaded www.securityfocus.com