2006-02-28 11:00:00
mitre
PUBLISHED
Oi! Email Marketing System 3.0 (aka Oi! 3) stores the servers FTP password in cleartext on a Configuration web page, which allows local users with superadministrator privileges, or attackers who have obtained access to the web page, to view the password.