Total vulnerabilities in the database
The phpmyadmin subsystem in AlternC 0.9.5 and earlier transmits the SQL password in cleartext in a cookie, which might allow remote attackers to obtain the password by sniffing or by conducting a cross-site scripting (XSS) attack.
Software | From | Fixed in |
---|---|---|
alternc / alternc | - | 0.9.5.x |