Unrated severityNVD Advisory· Published May 14, 2005· Updated Apr 16, 2026
CVE-2005-1586
CVE-2005-1586
Description
Quick.Forum 2.1.6 stores potentially sensitive information such as usernames, banned IP addresses, censored words, and backups under the web document root, which allows remote attackers to obtain that information via a direct request to (1) db/users.txt, (2) db/banList.txt, (3) db/censureWords.txt, or (4) backup files.
Affected products
1- cpe:2.3:a:open_solution:quick.forum:2.1.6:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- lostmon.blogspot.com/2005/05/quickforum-topic-field-xss-and-page.htmlnvdVendor Advisory
- secunia.com/advisories/15200nvdVendor Advisory
- www.osvdb.org/16328nvdVendor Advisory
- www.osvdb.org/16329nvdVendor Advisory
News mentions
0No linked articles in our index yet.