{"id":"CVE-2005-3209","aliases":["EUVD-2005-3208","GHSA-6q7m-895m-rg7r"],"status":"published","title":"Aenovo products (1) aeNovo, (2) aeNovoShop, and (3) aeNovoWYSI store password information in...","description":"Aenovo products (1) aeNovo, (2) aeNovoShop, and (3) aeNovoWYSI store password information in plaintext in the (a) control, (b) content, and (c) page tables, which allows attackers with database access to obtain those passwords and gain privileges.","severity":{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00476,"percentile":0.41355,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2005-10-14T04:00:00Z","modified":"2026-06-16T22:16:30Z","products":[{"vendor":"aenovo","product":"aenovo"},{"vendor":"aenovo","product":"aenovoshop"},{"vendor":"aenovo","product":"aenovowysi"}],"references":[{"url":"http://secunia.com/advisories/17117/","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq\u0026m=112872593432359\u0026w=2","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/22549","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.kapda.ir/advisory-78.html","tags":["x_refsource_MISC","x_transferred","Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/19939","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-3209"},{"url":"http://secunia.com/advisories/17117"},{"url":"https://github.com/advisories/GHSA-6q7m-895m-rg7r"}],"sources":{"cve":[{"id":"CVE-2005-3209","description":"Aenovo products (1) aeNovo, (2) aeNovoShop, and (3) aeNovoWYSI store password information in plaintext in the (a) control, (b) content, and (c) page tables, which allows attackers with database access to obtain those passwords and gain privileges.","status":"published","published":"2005-10-14T04:00:00Z","modified":"2024-08-07T23:01:59.065Z","updated_at":"2026-11-02T14:33:38.550354Z"}],"euvd":[{"id":"EUVD-2005-3208","description":"Aenovo products (1) aeNovo, (2) aeNovoShop, and (3) aeNovoWYSI store password information in plaintext in the (a) control, (b) content, and (c) page tables, which allows attackers with database access to obtain those passwords and gain privileges.","status":"published","published":"2005-10-14T04:00:00Z","modified":"2024-08-07T23:01:59Z","updated_at":"2026-11-03T01:15:27.690358Z"}],"ghsa":[{"id":"GHSA-6q7m-895m-rg7r","title":"Aenovo products (1) aeNovo, (2) aeNovoShop, and (3) aeNovoWYSI store password information in...","description":"Aenovo products (1) aeNovo, (2) aeNovoShop, and (3) aeNovoWYSI store password information in plaintext in the (a) control, (b) content, and (c) page tables, which allows attackers with database access to obtain those passwords and gain privileges.","status":"published","published":"2022-05-01T02:15:29Z","modified":"2025-04-03T04:18:27Z","updated_at":"2026-11-02T15:00:43.048577Z"}],"nvd":[{"id":"CVE-2005-3209","description":"Aenovo products (1) aeNovo, (2) aeNovoShop, and (3) aeNovoWYSI store password information in plaintext in the (a) control, (b) content, and (c) page tables, which allows attackers with database access to obtain those passwords and gain privileges.","status":"published","published":"2005-10-14T10:02:00Z","modified":"2026-06-16T22:16:30.2Z","cvss":[{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:00:56.902692Z"}]}}