Security Advisory

CVE-2005-1648

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2005-05-18 04:00:00
Last updated 2024-09-17 02:21:44
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Gurgens (GASoft) Ultimate Forum 1.0 stores the db/Genid.dat database file under the web document root with insufficient access control, which allows remote attackers to obtain and decrypt usernames and passwords.