CVE-2006-2719

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

0.45%

Published

Jun 1, 2006

Modified

Jun 16, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

JIWA Financials 6.4.14 stores usernames and passwords for all accounts in cleartext in the HR_Staff table in Microsoft SQL Server, and sends the usernames and passwords in cleartext to the application's SQL Server ODBC driver, which might allow context-dependent attackers to obtain the passwords.

Affected Products (1)

jiwa · financialsvulnerable

References (10)

http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046398.html

Exploit

http://secunia.com/advisories/20342

Exploit

http://securityreason.com/securityalert/1000

http://securitytracker.com/id?1016181

http://www.securityfocus.com/archive/1/435352/100/0/threaded

http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046398.html

Exploit

http://secunia.com/advisories/20342

KEV Catalog EPSS Scores Vendors All CVEs