CVE-2001-1536

CVE-2001-1536 describes a critical vulnerability in AudioGalaxy where usernames and passwords are saved in cleartext within cookies. This flaw allows remote attackers to easily steal authentication credentials through network sniffing or cross-site scripting attacks, leading to unauthorized access. With a CVSS score of 7.5 (High), the vulnerability is easily exploitable over the network with no authentication required, resulting in a high impact on confidentiality. While there is no known active exploitation or public exploit code, the vulnerability has garnered significant community discussion, indicating awareness of its potential risk.