CVE-2003-1540

CVE-2003-1540 describes an information disclosure vulnerability in WF-Chat 1.0 Beta. This flaw allows remote attackers to access sensitive authentication data, specifically usernames and passwords, by directly requesting !pwds.txt and !nicks.txt due to insufficient access control on files stored under the web root. The vulnerability has a CVSS score of 5.0, indicating a medium severity. It is easily exploitable over the network with low attack complexity and requires no authentication, leading to a partial compromise of confidentiality. The FAUCET Risk Score of 93/100 suggests a high potential impact. While not listed on the KEV catalog, exploit code for this vulnerability is publicly available on ExploitDB (EDB-22388). There is significant community discussion with 10 mentions, including references to a NASL script for user disclosure, suggesting awareness and potential for exploitation.