Login Request a demo
Unscored severity · published May 18, 2005
CVE-2005-1648
Gurgens (GASoft) Ultimate Forum 1.0 stores the db/Genid.dat database file under the web document root with insufficient access control, which allows remote attackers to obtain and…
–
CVSS
1.7%
EPSS
No
On KEV
Description
Gurgens (GASoft) Ultimate Forum 1.0 stores the db/Genid.dat database file under the web document root with insufficient access control, which allows remote attackers to obtain and decrypt usernames and passwords.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GU
Gurgens Ultimate Forum · Gurgens
2.1 · source: NVD
Affected product
GU
Gurgens Ultimate Forum
Gurgens
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-1648
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-1648
Exploit
http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0350.html
Vendor Advisory
http://secunia.com/advisories/15374
Exploit
http://securitytracker.com/id?1013974