CVE-2006-0920: Oi Email Marketing System

Low severity, CVSS 1.7. EPSS: 0.8% chance of exploitation in the next 30 days.

Oi! Email Marketing System 3.0 (aka Oi! 3) stores the server's FTP password in cleartext on a Configuration web page, which allows local users with superadministrator privileges, or attackers who have obtained access to the web page, to view the password.

Affected products

• Oi Email Marketing System: version 3.0 only

Published 2006-02-28. Last modified 2026-06-16.