CVE-2003-1540
MEDIUM 5.0EPSS 3.2%
WF-Chat 1.0 Beta stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain authentication information via a direct request to (1) !pwds.txt and (2) !nicks.txt.
- CVSS v2.0 NVD
- 5.0 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N - EPSS
- 3.23% chance of exploitation in the next 30 days, 88th percentile
- Published
- 2008-02-13
- Updated
- 2024-08-08