CVE-2003-1404

DotBr 0.1 stores config.inc with insufficient access control under the web document root, which allows remote attackers to obtain sensitive information such as SQL usernames and passwords.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2003-12-31

Last modified

2024-08-08

Weaknesses

CWE-200

Affected products

• Botbr (Dotbr)

References

• http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0070.html
• http://www.osvdb.org/5092
• http://www.securityfocus.com/bid/6865
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11354