vendor:
Simple Chat!
by:
SecurityFocus
8,5
CVSS
HIGH
Information Disclosure
200
CWE
Product Name: Simple Chat!
Affected Version From: Simple Chat! 1.0
Affected Version To: Simple Chat! 1.0
Patch Exists: No
Related CWE: N/A
CPE: a:simple_chat:simple_chat
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2002
Simple Chat! Information Disclosure Vulnerability
Simple Chat! is a web-based chat application that does not restrict access to sensitive information by default. An attacker can exploit this vulnerability by accessing the usr.dat file located in the chat/data directory, which contains sensitive information such as usernames and passwords.
Mitigation:
Restrict access to the usr.dat file by setting appropriate permissions.
