CVEvulnerability
CVE-2005-1586
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-05-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Description
Quick.Forum 2.1.6 stores potentially sensitive information such as usernames, banned IP addresses, censored words, and backups under the web document root, which allows remote attackers to obtain that information via a direct request to (1) db/users.txt, (2) db/banList.txt, (3) db/censureWords.txt, or (4) backup files.
Affected configurations
• open solution quick.forum 2.1.6
References
- http://lostmon.blogspot.com/2005/05/quickforum-topic-field-xss-and-page.html Vendor Advisory
- http://secunia.com/advisories/15200 Vendor Advisory
- http://www.osvdb.org/16328 Vendor Advisory
- http://www.osvdb.org/16329 Vendor Advisory
- http://lostmon.blogspot.com/2005/05/quickforum-topic-field-xss-and-page.html Vendor Advisory
- http://secunia.com/advisories/15200 Vendor Advisory
- http://www.osvdb.org/16328 Vendor Advisory
- http://www.osvdb.org/16329 Vendor Advisory