Web Forums Server
Approved changes feed: RSS · Atom
cpe:2.3:a:minihttpserver.net:web_forums_server:2.0_power_pack:*:*:*:*:*:*:*
part: a version: 2.0_power_pack update: *
| Vendor | Minihttpserver.Net (9cc675e2-c3cc-5e3c-8077-be4d81dbb147) |
|---|---|
| Product | Web Forums Server (4237c042-54f4-5539-80f7-7abcfdb0e5a2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2004-1497 |
not_vulnerable | 2026-06-08 04:47:54.373688 |
Details available
Web Forums Server 1.6 and 2.0 Power Pack stores passwords in plaintext in the Username.ini file, which allows local users to gain privileges.
Published: 2005-02-19T05:00:00.000Z
Updated: 2024-08-08T00:53:24.164Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1496 |
vulnerable | 2026-06-08 04:47:54.373337 |
Details available
Directory traversal vulnerability in Web Forums Server 1.6 and 2.0 Power Pack allows remote attackers to read arbitrary files via a URL containing (1) "..\" (dot dot backslash), (2) "../" (dot dot slash), (3) "/%2E%2E%5C" (encoded dot dot backslash), or (4) "%2E%2E%2F" (encoded dot dot slash).
Published: 2005-02-19T05:00:00.000Z
Updated: 2024-08-08T00:53:24.079Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.