Unrated severityNVD Advisory· Published Dec 15, 2005· Updated Apr 16, 2026

CVE-2005-4249

Description

ADP Forum 2.0 through 2.0.3 stores sensitive information in plaintext files under the web document root with insufficient access control, which allows remote attackers to obtain user credentials via requests to the forum/users directory.

Affected products

Adp/Adp Forum4 versions
cpe:2.3:a:adp:adp_forum:2.0:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:adp:adp_forum:2.0:*:*:*:*:*:*:*
- cpe:2.3:a:adp:adp_forum:2.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:adp:adp_forum:2.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:adp:adp_forum:2.0.3:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.blogcu.com/Liz0ziM/144336/nvdExploitVendor AdvisoryURL Repurposed
secunia.com/advisories/18027nvdVendor Advisory
securityreason.com/securityalert/253nvd
www.securityfocus.com/archive/1/419393/100/0/threadednvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000