CVE-2003-1401

login.php in php-Board 1.0 stores plaintext passwords in $username.txt with insufficient access control under the web document root, which allows remote attackers to obtain sensitive information via a direct request...

CVE-2003-1401

CVE-2003-1401 affects php-Board 1.0 where login.php stores plaintext passwords in a file named $username.txt under the web document root with insufficient access controls. This allows remote attackers to directly request the file and obtain sensitive credentials, causing partial confidentiality i...

CVE-2003-1401

login.php in php-Board 1.0 stores plaintext passwords in $username.txt with insufficient access control under the web document root, which allows remote attackers to obtain sensitive information via a direct request...