CVE-2008-3059: Octeth Oempro

Medium severity, CVSS 4.0. EPSS: 1.1% chance of exploitation in the next 30 days.

member/settings_account.php in Octeth Oempro 3.5.5.1, and possibly other versions before 4, uses cleartext to transmit a password entered in the FormValue_Password field, which makes it easier for remote attackers to obtain sensitive information by sniffing the network, related to the "Settings - Account Information" tab.

Affected products

• Octeth Oempro: version 3.5.5.1 only

Published 2008-12-03. Last modified 2026-06-16.