CVE-2005-3856: Krusader

Medium severity, CVSS 4.0. EPSS: 1% chance of exploitation in the next 30 days.

The Popular URL capability (popularurls.cpp) in Krusader 1.60.0 and 1.70.0-beta1 saves passwords in cleartext in the krusaderrc file when the user enters URLs containing passwords in the panel URL field, which might allow attackers to access other sites.

Affected products

• Krusader Krusader: version 1.60.0 only; version 1.70.0_beta1 only

Published 2005-11-27. Last modified 2026-06-16.