| Package | Affected versions | Patched versions |
|---|---|---|
| xitami | = 2.5≥ 2.4, ≤ 2.5 |
Xitami 2.4 through 2.5 b4 stores the Administrator password in plaintext in the default.aut file, whose default permissions are world-readable, which allows remote attackers to gain privileges.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free