The remote web server contains a CGI application that is prone to information disclosure. Description : The remote host is running WWWBoard, a bulletin board system written by Matt Wright. This board system comes with a password file (passwd.txt) installed next to the file 'wwwboard.html'. An attacker may obtain the content of this file and decode the password to modify the remote www board.

Configure the wwwadmin.pl script to change the name and location of 'passwd.txt'.

• http://archives.neohapsis.com/archives/bugtraq/1998_3/0746.html
• http://archives.neohapsis.com/archives/bugtraq/1999-q3/0993.html

---

Updated on 2015-03-25