CVE-2003-1401
php-Board 1.0 - Unauthenticated Sensitive Information Exposure via Plaintext Password Storage
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2003-1401. PoCs published by frog.
AI-analyzed exploit summary This exploit describes an information disclosure vulnerability in php-board where user data, including passwords, is stored in flat files accessible via direct URL requests. The PoC demonstrates how an attacker can retrieve sensitive user information by accessing a predictable file path.
Description
login.php in php-Board 1.0 stores plaintext passwords in $username.txt with insufficient access control under the web document root, which allows remote attackers to obtain sensitive information via a direct request.
Exploits (1)
This exploit describes an information disclosure vulnerability in php-board where user data, including passwords, is stored in flat files accessible via direct URL requests. The PoC demonstrates how an attacker can retrieve sensitive user information by accessing a predictable file path.