medium5.8Public exploit code
CVE-2003-1401
login.php in php-Board 1.0 stores plaintext passwords in $username.txt with insufficient access control under the web document root, which allows remote attack…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PHP-Board 1.0 - User Password Disclosure2003-02-15 · webapps · php · Verified
Impact
login.php in php-Board 1.0 stores plaintext passwords in $username.txt with insufficient access control under the web document root, which allows remote attackers to obtain sensitive information via a direct request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Php Board | Php Board | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0069.html
- http://www.securityfocus.com/bid/6862
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11338
- http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0069.html
- http://www.securityfocus.com/bid/6862
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11338