CVE-2008-2279: Freelance Auction Script

Medium severity, CVSS 5.0. EPSS: 2.3% chance of exploitation in the next 30 days.

Freelance Auction Script 1.0 stores user passwords in plaintext in the tbl_users table, which allows attackers to gain privileges by reading the table.

Affected products

• Freelance Auction Freelance Auction Script: version 1.0 only

Published 2008-05-16. Last modified 2026-06-16.