| tiêu đề | https://codeastro.com https://codeastro.com/membership-management-system-in-php-with-source-code/#unlock 8.2.12 Information Disclosure / Hardcoded Credentials |
|---|
| Mô tả | An unauthenticated attacker can access hardcoded admin credentials and database details via a publicly accessible file in the upload directory. The file /uploads/01 LOGIN DETAILS & PROJECT INFO.txt contains plaintext login credentials ([email protected] / codeastro.com) and database name. This grants full access to the web application's backend, violating confidentiality and integrity.
|
|---|
| Nguồn | ⚠️ https://github.com/honestcorrupt/-CVE-Submission-CampCodes-Project-Management-System---Hardcoded-Credentials-Information-Disclosure |
|---|
| Người dùng | honest_corrupt (UID 85229) |
|---|
| Đệ trình | 22/05/2025 14:54 (cách đây 1 Năm) |
|---|
| Kiểm duyệt | 26/05/2025 17:06 (4 days later) |
|---|
| Trạng thái | Bản sao |
|---|
| Mục VulDB | 278773 [CodeAstro Membership Management System 1.0 /uploads/ tiết lộ thông tin] |
|---|
| điểm | 0 |
|---|