CVE Catalog
CVE-1999-0953
HighExploitation Probability (EPSS)
Very high risk8.60%
94th percentile - higher than 94% of all known CVEs
Summary
WWWBoard stores encrypted passwords in a password file that is under the web root, making it accessible to remote attackers.
Risk Assessment
Access to the password file may allow attackers to gain access to user accounts and potentially the system.
Recommendation
It is recommended to move the password file outside the web root and implement additional security measures.
Original NVD description (English source)
WWWBoard stores encrypted passwords in a password file that is under the web root and thus accessible by remote attackers.