CVE-2005-2443

CVE-2005-2443 describes an information disclosure vulnerability in Kshout versions 2.x and 3.x, where the settings.dat file, containing sensitive data like usernames and passwords, is stored under the web document root with inadequate access controls. This allows unauthenticated remote attackers to easily access and retrieve this confidential information. With a CVSS score of 5.0, this low-complexity attack requires no authentication and results in a partial compromise of confidentiality. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.