Lucene search
HistoryOct 20, 2007 - 10:00 a.m.
CVE-2003-1401
cve-2003-1401
php-board 1.0
plaintext passwords
insufficient access control
sensitive information
remote attackers
5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
6.5 Medium
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
81.0%
login.php in php-Board 1.0 stores plaintext passwords in $username.txt with insufficient access control under the web document root, which allows remote attackers to obtain sensitive information via a direct request.
Affected configurations
Node
php_boardphp_boardMatch1.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| php_board:php_board | php board | eq | 1.0 |
5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
6.5 Medium
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
81.0%
Related for CVE-2003-1401