CVE-2003-1423

CVE-2003-1423 describes an insufficient access control vulnerability in Petitforum, affecting Linux and Unix systems, where the liste.txt data file is stored under the web document root. This allows remote attackers to directly access sensitive information like email addresses and encrypted passwords. With a CVSS score of 5.0 (medium severity), this vulnerability is easily exploitable over the network with low attack complexity and no authentication required, leading to a complete compromise of confidentiality. While there is no evidence of active exploitation, no public exploit code (Metasploit, Nuclei, ExploitDB), and no KEV listing, the vulnerability has garnered significant community discussion with 10 mentions.