CVE-2003-1540 | BDVDB-2026-29203 Detail

Description#

WF-Chat 1.0 Beta stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain authentication information via a direct request to (1) !pwds.txt and (2) !nicks.txt.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://securitytracker.com/id?1006352
http://www.securityfocus.com/bid/7147
http://www.securityfocus.com/archive/1/315583/30/25430/threaded
http://secunia.com/advisories/8396
http://securityreason.com/securityalert/3645
https://exchange.xforce.ibmcloud.com/vulnerabilities/11571

Exploit#

No public exploit known

History#

Version 12008-02-13Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.