CVE-2001-0839

iBill password management - Info Disclosure

Title source: llm

Description

ibillpm.pl in iBill password management system generates weak passwords based on a client's MASTER_ACCOUNT, which allows remote attackers to modify account information in the .htpasswd file via brute force password guessing.

Exploits (1)

exploitdb WORKING POC VERIFIED
by MK Ultra · javaremotecgi
https://www.exploit-db.com/exploits/21129

Scores

EPSS 0.0306
EPSS Percentile 86.8%

Details

Status published
Products (1)
ibill_internet_billing_company/processing_plus
Published Dec 06, 2001
Tracked Since Feb 18, 2026