CVE-2008-5762: Mariovaldez Simple Text-File Login Script

Medium severity, CVSS 5.0. EPSS: 2.6% chance of exploitation in the next 30 days.

Simple Text-File Login Script (SiTeFiLo) 1.0.6 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the password via a direct request for slog_users.txt.

Affected products

• Mariovaldez Simple Text-File Login Script: version 1.0.6 only

Published 2008-12-30. Last modified 2026-06-16.