CVE-2005-4249 | BDVDB-2026-14038 Detail

Description#

ADP Forum 2.0 through 2.0.3 stores sensitive information in plaintext files under the web document root with insufficient access control, which allows remote attackers to obtain user credentials via requests to the forum/users directory.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/18027
http://www.securityfocus.com/archive/1/419393/100/0/threaded
http://securityreason.com/securityalert/253
http://www.blogcu.com/Liz0ziM/144336/

Exploit#

No public exploit known

History#

Version 12005-12-15Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.