Lucene search
HistoryMay 02, 2005 - 4:00 a.m.
CVE-2005-1220
cve-2005-1220
shoutbox
script
sensitive information
remote attackers
password hashes
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.7 Medium
AI Score
Confidence
Low
0.011 Low
EPSS
Percentile
84.3%
Shoutbox SCRIPT 3.0.2 and earlier allows remote attackers to obtain sensitive information via a direct request to db/settings.dat, which displays usernames and password hashes.
Affected configurations
Node
knusperleichtshoutbox_scriptRange≤3.0.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| knusperleicht:shoutbox_script | knusperleicht shoutbox script | le | 3.0.2 |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.7 Medium
AI Score
Confidence
Low
0.011 Low
EPSS
Percentile
84.3%
Related for CVE-2005-1220