CVE-2003-1571

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-04-02 · updated 2026-06-16
Weakness: CWE-264

Description

Web Wiz Guestbook 6.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database and obtain sensitive information via a direct request for database/WWGguestbook.mdb. NOTE: it was later reported that 8.21 is also affected.

Affected products

Webwizguide Web Wiz Guestbook: 6.0, 8.21

References

http://secunia.com/advisories/9639
http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=25863
http://www.osvdb.org/2492
https://www.exploit-db.com/exploits/7488
http://secunia.com/advisories/9639
http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=25863
http://www.osvdb.org/2492
https://www.exploit-db.com/exploits/7488

Get alerted when CVE-2003-1571 or the next vulnerability affects your stack