CVE-2024-51051: Php Hardcoded Default Admin Credentials

Administrator password is hardcoded to a well-known weak/default value in a PHP configuration file shipped with the legacy 'Adult Video Script' (AVSCMS) application. Shipping a default credential (e.g., 'admin'/'admin') in version control allows any unauthenticated attacker who can reach the admin login endpoint to gain full administrative access to any depl

Provally CuratedPublic repositoryHighHigh confidenceVerifiedApache-2.0PHP
greprules fetch cve-2024-51051-php-hardcoded-default-admin-credentials --engine opengrep

Description

Administrator password is hardcoded to a well-known weak/default value in a PHP configuration file shipped with the legacy 'Adult Video Script' (AVSCMS) application. Shipping a default credential (e.g., 'admin'/'admin') in version control allows any unauthenticated attacker who can reach the admin login endpoint to gain full administrative access to any depl