CVE-2008-7207: Rivetcode Rivettracker

Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days.

RivetTracker before 1.0 stores passwords in cleartext in config.php, which allows local users to discover passwords by reading config.php.

Affected products

• Rivetcode Rivettracker: up to and including 0.8; version 0.1 only

Published 2009-09-11. Last modified 2026-06-16.