Minihttpserver.net: >> Web Forums Server Security Vulnerabilities
Directory traversal vulnerability in Web Forums Server 1.6 and 2.0 Power Pack allows remote attackers to read arbitrary files via a URL containing (1) "..\" (dot dot backslash), (2) "../" (dot dot slash), (3) "/%2E%2E%5C" (encoded dot dot backslash), or (4) "%2E%2E%2F" (encoded dot dot slash).
CVSS Score
5.0
EPSS Score
0.002
Published
2004-12-31
Web Forums Server 1.6 and 2.0 Power Pack stores passwords in plaintext in the Username.ini file, which allows local users to gain privileges.
CVSS Score
4.6
EPSS Score
0.001
Published
2004-12-31