CVE-2005-4249 in ADP Forum

Summary

ADP Forum 2.0 through 2.0.3 stores sensitive information in plaintext files under the web document root with insufficient access control, which allows remote attackers to obtain user credentials via requests to the forum/users directory.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservation: 12/15/2005
• Disclosure: 12/15/2005
• Moderation: VulDB entry created
• Entries: VDB-27503
• CPE: ready
• CWE: CWE-312 (Confirmed)
• CVSS: 5.3
• EPSS: 0.00235
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2005-4249
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2005-4249
• CVE Details: https://www.cvedetails.com/cve/CVE-2005-4249/