CVE-2003-1541

CVE-2003-1541 describes a critical vulnerability in PlanetMoon Guestbook tr3.a, where sensitive information, including admin and other passwords, is stored in plaintext under the web root in files/passwd.txt with insufficient access control. This allows unauthenticated remote attackers to directly access and retrieve these credentials. The vulnerability has a CVSS score of 5.0 (medium severity) due to its low attack complexity and the potential for complete confidentiality compromise, as indicated by its high FAUCET Risk Score of 93/100. While not listed in CISA's KEV catalog, exploit code is publicly available on ExploitDB (EDB-22408), and the vulnerability has garnered significant community discussion with 10 mentions, suggesting awareness and potential for exploitation.