CVE-2003-1401

CVE-2003-1401 describes a critical information disclosure vulnerability in php-Board 1.0, where user passwords were stored in plaintext within publicly accessible .txt files under the web root. This flaw allowed remote attackers to directly request and obtain sensitive user credentials due to insufficient access controls. The vulnerability has a CVSS score of 5.8, indicating a medium severity, and is easily exploitable over the network with medium attack complexity, leading to partial confidentiality and integrity impacts. While not actively exploited in the wild or on CISA's KEV catalog, public exploit code exists on ExploitDB, though there is minimal community discussion or media coverage surrounding this older vulnerability.