Unscored CVE-2005-1648 EUVD-2005-1650GHSA-92xx-659p-5xf8

Gurgens (GASoft) Ultimate Forum 1.0 stores the db/Genid.dat database file under the web document root with insufficient access control, whi…

Published May 18, 2005 · Updated Sep 17, 2024 · Assigned by mitre

Description

Gurgens (GASoft) Ultimate Forum 1.0 stores the db/Genid.dat database file under the web document root with insufficient access control, which allows remote attackers to obtain and decrypt usernames and passwords.

References

1013974 vdb-entry
15374 third-party-advisory
20050515 Ultimate Forum Password Database Vulnerability mailing-list