high7.5
CVE-2005-1648
Gurgens (GASoft) Ultimate Forum 1.0 stores the db/Genid.dat database file under the web document root with insufficient access control, which allows remote att…
Impact
Gurgens (GASoft) Ultimate Forum 1.0 stores the db/Genid.dat database file under the web document root with insufficient access control, which allows remote attackers to obtain and decrypt usernames and passwords.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gurgens | Gurgens Ultimate Forum | Version 2.1 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0350.html
- http://secunia.com/advisories/15374
- http://securitytracker.com/id?1013974
- http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0350.html
- http://secunia.com/advisories/15374
- http://securitytracker.com/id?1013974