CVE-2003-1383

WEB-ERP 0.1.4 and earlier are affected by an information-disclosure vulnerability: an HTTP request can retrieve the logicworks.ini file, exposing the MySQL database username and password. Root cause is improper access to the configuration file in the webERP application. Impact is partial confiden...

CVE-2003-1383

WEB-ERP 0.1.4 and earlier allows remote attackers to obtain sensitive information via an HTTP request for the logicworks.ini file, which contains the MySQL database username and password...