8396Third-party advisory
http://secunia.com/advisories/8396 CVE-2003-1540
WFChat 1.0 - Information Disclosure
Record summary
CVE-2003-1540 has a selected CVSS score of 5.0; EIP currently links 1 catalogued exploit.
Description
WF-Chat 1.0 Beta stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain authentication information via a direct request to (1) !pwds.txt and (2) !nicks.txt.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBWFChat 1.0 - Information DisclosureExploitDB exploitby subjNot analyzed1 file
References
73645Third-party advisory
http://securityreason.com/securityalert/3645 1006352vdb entry
http://securitytracker.com/id?1006352 20030319 WF-Chatmailing list
http://www.securityfocus.com/archive/1/315583/30/25430/threaded 7147vdb entry
http://www.securityfocus.com/bid/7147 wf-chat-plaintext-passwords(11571)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/11571 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2003-1540