Unscored CVE-2005-1220 EUVD-2005-1223GHSA-p6r7-3wrc-qfh7

Shoutbox SCRIPT 3.0.2 and earlier allows remote attackers to obtain sensitive information via a direct request to db/settings.dat, which di…

Published Apr 22, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Shoutbox SCRIPT 3.0.2 and earlier allows remote attackers to obtain sensitive information via a direct request to db/settings.dat, which displays usernames and password hashes.

References

knusperleicht-settings-info-disclosure(20177) vdb-entry
15695 vdb-entry
20050419 Shoutbox SCRIPT <= 3.0.2 Administrative MD5 Username and Password Retrieval [x0n3-h4ck] mailing-list
15015 third-party-advisory