Unrated severityNVD Advisory· Published May 18, 2005· Updated Jun 16, 2026
CVE-2005-1648
CVE-2005-1648
Description
Gurgens (GASoft) Ultimate Forum 1.0 stores the db/Genid.dat database file under the web document root with insufficient access control, which allows remote attackers to obtain and decrypt usernames and passwords.
Affected products
2cpe:2.3:a:gurgens:gurgens_ultimate_forum:2.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:gurgens:gurgens_ultimate_forum:2.1:*:*:*:*:*:*:*
- (no CPE)range: 1.0
Patches
Vulnerability mechanics
References
3- archives.neohapsis.com/archives/fulldisclosure/2005-05/0350.htmlnvdExploitPatch
- securitytracker.com/idnvdExploit
- secunia.com/advisories/15374nvdVendor Advisory
News mentions
0No linked articles in our index yet.