← Back

Tightauction

tightauction

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Tightauction
tightauction
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2002-1886
1Tightauction
1Tightauction
Apr 16, 2026
Dec 31, 2002
N/A· v4
N/A· v3
5.0 MEDIUM· v2
TightAuction 3.0 stores config.inc under the web document root with insufficient access control, which allows remote attackers to obtain the database username and password.