Lucene search
HistoryOct 20, 2007 - 10:00 a.m.
CVE-2003-1404
cve-2003-1404
dotbr 0.1
access control
information disclosure
sql injection
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.2 High
AI Score
Confidence
Low
0.009 Low
EPSS
Percentile
83.2%
DotBr 0.1 stores config.inc with insufficient access control under the web document root, which allows remote attackers to obtain sensitive information such as SQL usernames and passwords.
Affected configurations
Node
dotbrbotbrMatch0.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| dotbr:botbr | dotbr botbr | eq | 0.1 |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.2 High
AI Score
Confidence
Low
0.009 Low
EPSS
Percentile
83.2%
Related for CVE-2003-1404