TaleLin Lin-CMS Password Vulnerability in Configuration File

A vulnerability exists in TaleLin Lin-CMS versions through 0.6.0, specifically within the Tests Folder's config.py file. This issue arises from the improper handling of the username/password argument, which can lead to the password being stored in a configuration file. The vulnerability can be exploited remotely, although the attack's complexity is considered high. Publicly disclosed exploitation details are available.

Impact

Exploitation of this vulnerability allows unauthorized access to the default administrator account, potentially leading to a complete system takeover and exposure of sensitive information.