CVE-2005-1716
Description
TOPo 2.2 (2.2.178) stores data files in the data directory under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as client IP addresses.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
Root cause
"The `/data/` directory is placed under the web document root with no access controls, allowing remote attackers to directly download `.dat` files containing sensitive information."
Attack vector
An attacker can simply request `http://[victim]/data/` to list the directory, or directly download any `.dat` file stored there [ref_id=1]. These files contain all client IP addresses of users who voted or added comments, along with other sensitive information [ref_id=1]. No authentication or special privileges are required — the attacker only needs network access to the web server [ref_id=1].
Affected code
The application stores all data files (votes, comments, and other site information) in the `/data/` folder under the web document root [ref_id=1]. These files use the `.dat` extension and are accessible directly via HTTP without any access control [ref_id=1].
What the fix does
The advisory states that no solution was available at the time of disclosure [ref_id=1]. No patch is included in the bundle. To remediate, administrators would need to restrict access to the `/data/` directory — for example, via web server configuration (e.g., `.htaccess` deny rules) or by moving the data directory outside the web document root [ref_id=1].
Preconditions
- networkThe attacker must have network access to the web server hosting TOPo 2.2.178
- authNo authentication or special privileges are required
Reproduction
1. Identify a target running TOPo 2.2.178. 2. Navigate to `http://[victim]/data/` in a web browser. 3. Download any `.dat` file listed (e.g., vote or comment data files). 4. Open the downloaded file to view stored client IP addresses and other sensitive information [ref_id=1].
Generated on May 26, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.
References
4News mentions
0No linked articles in our index yet.