CVE-2004-1788: ASP-Nuke 1.3 and earlier places user credentials under the web document root with insufficient access contr...

Security readout for executives and security teams

ASP-Nuke 1.3 and earlier may store user credentials in a database file beneath the public website directory. If access controls are weak, an outside attacker could retrieve that data directly. The sources do not provide a CVSS score, vendor patch, or evidence of active exploitation. Exposure is limited to organizations still running ASP-Nuke 1.3 or earlier with main.mdb reachable from the public web root. Treat confirmed internet-facing exposure as urgent because credential disclosure can enable account compromise. If ASP-Nuke is not present, record the finding as not applicable. Mitigation focus: Inventory any ASP-Nuke deployments and confirm version 1.3 or earlier is not in use.; Check vendor or maintainer guidance for fixed versions or official hardening steps.; Ensure credential database files are not web-retrievable..

Prepared

Jun 29, 2026, 21:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.