CVE-2003-1404

CVE-2003-1404 describes an information disclosure vulnerability in DotBr 0.1, where the config.inc file is stored with inadequate access controls within the web document root. This allows remote, unauthenticated attackers to retrieve sensitive data, including SQL usernames and passwords. With a CVSS score of 7.5, this vulnerability is easily exploitable over the network with low complexity, potentially leading to partial compromise of confidentiality, integrity, and availability. While there is no known active exploitation, public exploit code, or Metasploit/Nuclei modules, the vulnerability has garnered significant community discussion, indicating awareness and potential for future exploitation.