PT-2005-4937 · Adp · Adp Forum

Liz0 · Published 2005-12-15 · Updated 2024-02-14 · CVE-2005-4249

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions ADP Forum versions 2.0 through 2.0.3

Description The issue allows remote attackers to obtain user credentials due to sensitive information being stored in plaintext files under the web document root with insufficient access control. This can be achieved via requests to the "forum/users" directory.

Recommendations For ADP Forum versions 2.0 through 2.0.3, consider restricting access to the forum/users directory to minimize the risk of exploitation. As a temporary workaround, limit access to sensitive information stored in plaintext files under the web document root until a proper fix is applied.

Exploit

Fix

Related Identifiers

CVE-2005-4249

Affected Products

Adp Forum

References · 5

• 🔥 http://blogcu.com/Liz0ziM/144336 · Exploit
• http://secunia.com/advisories/18027 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-4249 · Security Note
• http://securityfocus.com/archive/1/419393/100/0/threaded · Note
• http://securityreason.com/securityalert/253 · Note