4
CVE-2006-6964
- EPSS 0.96%
- Veröffentlicht 29.01.2007 16:28:00
- Zuletzt bearbeitet 16.06.2026 22:34:08
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginMailEnable Professional before 1.78 provides a cleartext user password when an administrator edits the user's settings, which allows remote authenticated administrators to obtain sensitive information by viewing the HTML source.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mailenable ≫ Mailenable Professional Version1.7
Mailenable ≫ Mailenable Professional Version1.71
Mailenable ≫ Mailenable Professional Version1.72
Mailenable ≫ Mailenable Professional Version1.73
Mailenable ≫ Mailenable Professional Version1.74
Mailenable ≫ Mailenable Professional Version1.75
Mailenable ≫ Mailenable Professional Version1.76
Mailenable ≫ Mailenable Professional Version1.77
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.96% | 0.567 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4 | 8 | 2.9 |
AV:N/AC:L/Au:S/C:P/I:N/A:N
|
http://securitytracker.com/id?1016337
http://www.mailenable.com/Professional1-ReleaseNotes.txt
https://exchange.xforce.ibmcloud.com/vulnerabilities/27185