CVE-2003-1540

Published: Dec 31, 2003Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

WF-Chat 1.0 Beta stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain authentication information via a direct request to (1) !pwds.txt and (2) !nicks.txt.

Affected (1)

Products: Wfchat: Wfchat

Wfchat

1 product

Wfchat

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Wfchat Wfchat	Version 1.0 beta

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (12)

http://secunia.com/advisories/8396

Source: cve@mitre.org

http://securityreason.com/securityalert/3645

Source: cve@mitre.org

http://securitytracker.com/id?1006352

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/315583/30/25430/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/7147

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/11571

Source: cve@mitre.org

http://secunia.com/advisories/8396