critical10.0Public exploit code
CVE-1999-0953
WWWBoard stores encrypted passwords in a password file that is under the web root and thus accessible by remote attackers.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WWWBoard 2.0 - 'passwd.txt' Remote Password Disclosure2007-01-01 · webapps · cgi · Verified
Impact
WWWBoard stores encrypted passwords in a password file that is under the web root and thus accessible by remote attackers.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Matt Wright | Wwwboard | Version 2.0_alpha_2.1 |