CVE-2002-0324 in Graymatterinfo

Summary

Greymatter 1.21c and earlier with the Bookmarklet feature enabled allows remote attackers to read a cleartext password and gain administrative privileges by guessing the name of a gmrightclick-*.reg file which contains the administrator name and password in cleartext, then retrieving the file from the web server before the Greymatter administrator performs a "Clear And Exit" action.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Disclosure

06/25/2002

CPE

ready

CVSS

7.3

EPSS

0.00943

Activities

Very Low

Sources

Might our Artificial Intelligence support you?

Check our Alexa App!