CVE-2005-4249

Published: Dec 15, 2005Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

ADP Forum 2.0 through 2.0.3 stores sensitive information in plaintext files under the web document root with insufficient access control, which allows remote attackers to obtain user credentials via requests to the forum/users directory.

Affected (4)

Products: Adp: Adp Forum

Adp

1 product

Adp Forum

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Adp Adp Forum	Version 2.0.1
Adp Adp Forum	Version 2.0.2
Adp Adp Forum	Version 2.0.3
Adp Adp Forum	Version 2.0

References (8)

http://secunia.com/advisories/18027

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/253

Source: cve@mitre.org

http://www.blogcu.com/Liz0ziM/144336/

Source: cve@mitre.org

ExploitVendor AdvisoryURL Repurposed

http://www.securityfocus.com/archive/1/419393/100/0/threaded

Source: cve@mitre.org

http://secunia.com/advisories/18027

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securityreason.com/securityalert/253

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.blogcu.com/Liz0ziM/144336/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor AdvisoryURL Repurposed

http://www.securityfocus.com/archive/1/419393/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.