CVEvulnerability

CVE-2005-4249

5.0 MEDIUM Published 2005-12-15 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2005-12-15
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N

Description

ADP Forum 2.0 through 2.0.3 stores sensitive information in plaintext files under the web document root with insufficient access control, which allows remote attackers to obtain user credentials via requests to the forum/users directory.

Affected configurations

• adp adp forum 2.0 • adp adp forum 2.0.1 • adp adp forum 2.0.2 • adp adp forum 2.0.3

References

http://secunia.com/advisories/18027 Vendor Advisory
http://securityreason.com/securityalert/253 securityreason.com
http://www.blogcu.com/Liz0ziM/144336/ Exploit, Vendor Advisory, URL Repurposed
http://www.securityfocus.com/archive/1/419393/100/0/threaded www.securityfocus.com
http://secunia.com/advisories/18027 Vendor Advisory
http://securityreason.com/securityalert/253 securityreason.com
http://www.blogcu.com/Liz0ziM/144336/ Exploit, Vendor Advisory, URL Repurposed
http://www.securityfocus.com/archive/1/419393/100/0/threaded www.securityfocus.com