PT-2003-2485 · Wf-Chat · Wf-Chat

Subj · Published 2003-12-31 · Updated 2018-10-19 · CVE-2003-1540

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions WF-Chat version 1.0 Beta

Description The issue allows remote attackers to obtain authentication information due to insufficient access control of sensitive information stored under the web root. This can be achieved via a direct request to API endpoints such as "/!pwds.txt" and "/!nicks.txt".

Recommendations For WF-Chat version 1.0 Beta, restrict access to the !pwds.txt and !nicks.txt files to minimize the risk of exploitation. Consider implementing proper access controls for sensitive information stored under the web root.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2003-1540

Affected Products

Wf-Chat

References · 8

• 🔥 https://exploit-db.com/exploits/22388 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-1540 · Security Note
• http://securitytracker.com/id?1006352 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11571 · Note
• http://secunia.com/advisories/8396 · Note
• http://securityreason.com/securityalert/3645 · Note
• http://securityfocus.com/archive/1/315583/30/25430/threaded · Note
• http://securityfocus.com/bid/7147 · Note