Unscored CVE-2003-1383 EUVD-2003-1373GHSA-hm72-hh47-rvg2

WEB-ERP 0.1.4 and earlier allows remote attackers to obtain sensitive information via an HTTP request for the logicworks.ini file, which co…

Published Oct 19, 2007 · Updated Aug 8, 2024 · Assigned by mitre

Description

WEB-ERP 0.1.4 and earlier allows remote attackers to obtain sensitive information via an HTTP request for the logicworks.ini file, which contains the MySQL database username and password.

References

weberp-logicworks-ini-access(11443) vdb-entry
3257 third-party-advisory
20030301 web-erp 0.1.4 database access vulnerability mailing-list
6996 vdb-entry