← Volver a CVEs
CVE-2003-1404
N/ADescripcion
DotBr 0.1 stores config.inc with insufficient access control under the web document root, which allows remote attackers to obtain sensitive information such as SQL usernames and passwords.
Detalles CVE
Puntuacion CVSS v3.1N/A
Publicado12/31/2003
Ultima modificacion4/16/2026
Fuentenvd
Avistamientos honeypot0
Productos afectados
dotbr:botbr
Debilidades (CWE)
CWE-200
Referencias
http://www.osvdb.org/5092(cve@mitre.org)
http://www.securityfocus.com/bid/6865(cve@mitre.org)
https://exchange.xforce.ibmcloud.com/vulnerabilities/11354(cve@mitre.org)
http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0070.html(af854a3a-2127-422b-91ae-364da2661108)
http://www.osvdb.org/5092(af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/6865(af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/11354(af854a3a-2127-422b-91ae-364da2661108)
Correlaciones IOC
Sin correlaciones registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.