CVE-2003-0781 Unknown vulnerability in ecartis before 1.0.0 does not properly validate user input, which allows attackers to obtain mailing list passwords.

HighCVSS 10.0 EPSS 1.4%

Published: 2004-03-25 07:00
Updated: 2026-06-17 01:02
Exploit status: No public exploit known

Sign in for asset impact Search another CVE

Description

Unknown vulnerability in ecartis before 1.0.0 does not properly validate user input, which allows attackers to obtain mailing list passwords.

Affected products

Product	Affected versions	Fixed in
ecartis	= 1.0.0	No fix listed

References

DSA-467 patch vendor-advisory
ecartis-subscribe-password-disclosure(12929) vdb-entry

CVSS v2.0

10.0 High

AV:N/AC:L/Au:N/C:C/I:C/A:C

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: Complete
Integrity: Complete
Availability: Complete

Weakness & likelihood

EPSS (exploitation probability, 30 days): 1.41% (percentile 73.1)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.