VYPR
Unrated severityNVD Advisory· Published Jun 17, 2005· Updated Apr 16, 2026

CVE-2005-2029

CVE-2005-2029

Description

amaroK Web Frontend 1.3 stores the globals.inc file under the web root without a .php extension and insufficient access control, which allows remote attackers to obtain the database username and password via a direct request to the file.

Affected products

1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.