CVE-2003-1401

Published: Dec 31, 2003Modified: Apr 16, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

login.php in php-Board 1.0 stores plaintext passwords in $username.txt with insufficient access control under the web document root, which allows remote attackers to obtain sensitive information via a direct request.

Affected (1)

Products: Php Board: Php Board

Php Board

1 product

Php Board

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Php Board Php Board	Version 1.0

Related CWEs

CWE-255

References (6)

http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0069.html

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/bid/6862

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/11338

Source: cve@mitre.org

http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0069.html

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.securityfocus.com/bid/6862

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/11338

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.