CVE-1999-0607

CVE-1999-0607 describes a vulnerability in i-soft QuikStore's quikstore.cgi script, which improperly stores the quikstore.cfg configuration file under the web document root with insufficient access controls. This allows unauthenticated remote attackers to directly access the file and retrieve the cleartext administrator password. The vulnerability has a CVSS score of 5.0 (Medium), indicating a network-based attack with low complexity, leading to partial confidentiality impact. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this decades-old vulnerability.