CVE-2003-1540 WF-Chat 1.0 Beta stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain authentication information via a direct request to (1) !pwds....
MediumCVSS 5.0
EPSS 3.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
WF-Chat 1.0 Beta stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain authentication information via a direct request to (1) !pwds.txt and (2) !nicks.txt.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wfchat | = 1.0-beta | No fix listed |
References
- 8396 third-party-advisory
- 3645 third-party-advisory
- 1006352 vdb-entry
- 20030319 WF-Chat mailing-list
- 7147 vdb-entry
- wf-chat-plaintext-passwords(11571) vdb-entry