Summary
The remote web server contains a CGI application that is prone to information disclosure.
Description :
The remote host is running WWWBoard, a bulletin board system written by Matt Wright.
This board system comes with a password file (passwd.txt) installed next to the file 'wwwboard.html'. An attacker may obtain the content of this file and decode the password to modify the remote www board.
Solution
Configure the wwwadmin.pl script to change the name and location of 'passwd.txt'.
References
Severity
Classification
-
CVE CVE-1999-0953 -
CVSS Base Score: 10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
Related Vulnerabilities