Vulnerability Description
PlanetMoon Guestbook tr3.a stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the admin script password, and other passwords, via a direct request to files/passwd.txt.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Planetmoon | Guestbook | tr3.a.1 |
Related Weaknesses (CWE)
References
- http://secunia.com/advisories/8392
- http://securityreason.com/securityalert/3653
- http://www.securityfocus.com/archive/1/315895/30/25400/threaded
- http://www.securityfocus.com/bid/7167
- http://www.securitytracker.com/id?1006360
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11609
- http://secunia.com/advisories/8392
- http://securityreason.com/securityalert/3653
- http://www.securityfocus.com/archive/1/315895/30/25400/threaded
- http://www.securityfocus.com/bid/7167
- http://www.securitytracker.com/id?1006360
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11609
FAQ
What is CVE-2003-1541?
CVE-2003-1541 is a vulnerability with a CVSS score of 5.0 (MEDIUM). PlanetMoon Guestbook tr3.a stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the admin script password, and other passwords, via...
How severe is CVE-2003-1541?
CVE-2003-1541 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2003-1541?
Check the references section above for vendor advisories and patch information. Affected products include: Planetmoon Guestbook.