Petitforum stores the liste.txt data file under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as e-mail addresses and encrypted passwords.
References
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2003-12-30 21:00
Updated : 2017-07-28 18:29
NVD link : CVE-2003-1423
Mitre link : CVE-2003-1423
JSON object : View
CWE
CWE-264
Permissions, Privileges, and Access Controls
Products Affected
microsoft
- all_windows
unix
- unix
petitforum
- petitforum
linux
- linux_kernel