CVE-2003-1541: PlanetMoon Guestbook tr3.a stores sensitive information under the web root with insufficient access control...

Security readout for executives and security teams

PlanetMoon Guestbook tr3.a stored administrator and other passwords in a web-accessible file with insufficient access control. A remote attacker could retrieve those passwords by requesting the exposed file. The main business risk is loss of control over any still-running guestbook instance and reuse of disclosed passwords elsewhere. Exposure is likely limited to legacy PlanetMoon Guestbook tr3.a deployments reachable over HTTP. Risk increases if the same passwords protect administration panels, hosting accounts, or reused credentials. Treat as a targeted legacy cleanup item. It is not KEV-listed in the supplied data, but any exposed instance can leak administrative credentials and create follow-on compromise risk. Mitigation focus: Identify and retire any PlanetMoon Guestbook tr3.a deployments.; Restrict web access to password storage files immediately.; Rotate any passwords stored by the guestbook..

Prepared

Jun 28, 2026, 19:27 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.