← Database

CVE-2003-1383

HIGH CVSS: 7.5 Published: 2003-12-31 Modified: 2026-06-16

Description

WEB-ERP 0.1.4 and earlier allows remote attackers to obtain sensitive information via an HTTP request for the logicworks.ini file, which contains the MySQL database username and password.

Affected Platforms

Logicworks Web Erp

Weakness Type

CWE-264

References