CVE-2003-1423: Petitforum stores the liste.txt data file under the web document root with insufficient access control, whi...

Security readout for executives and security teams

Petitforum could expose a data file named liste.txt from the public web area. That file may contain e-mail addresses and encrypted passwords. The business risk is credential-related information leakage, but the supplied sources do not identify affected versions, a CVSS score, or active exploitation. Exposure is most likely limited to legacy Petitforum installations where liste.txt remains in a web-accessible document root. The supplied affected-product metadata is n/a, so version-level exposure cannot be confirmed from these sources. Prioritize discovery if legacy Petitforum may still be exposed. Urgency depends on whether the file is publicly reachable and whether disclosed encrypted passwords remain useful elsewhere. Mitigation focus: Identify any current or archived Petitforum deployments.; Check vendor or maintainer guidance for supported fixes.; Ensure liste.txt is not web-accessible..

Prepared

Jun 29, 2026, 02:08 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.