OpenSolution QuickCMS Hardcoded Admin Credentials Vulnerability in Configuration File

A vulnerability in OpenSolution QuickCMS version 6.8 allows for the retrieval of sensitive admin credentials that are hardcoded and stored in plaintext within a configuration file. This issue can lead to privilege escalation for attackers who have access to the source code or the server file system. While the vendor was notified about this vulnerability, they did not provide details regarding the vulnerable version range. Only version 6.8 has been tested and confirmed as vulnerable, leaving the status of other versions uncertain.

Impact

Exploitation of this vulnerability could result in unauthorized access to admin credentials, allowing for privilege escalation within the application.