CVE-2007-0518: Scriptsez Smart PHP Subscriber

High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days.

Scriptsez Smart PHP Subscriber (aka subscribe) stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain encoded passwords via a direct request for pwd.txt.

Affected products

• Scriptsez Smart PHP Subscriber: any version

Published 2007-01-26. Last modified 2026-06-16.