CVE-2005-1424

LowCVSS 2.1/10Last modified Jun 16, 2026

Description

StumbleInside GoText 1.01 stores sensitive username, mail address,and phone number information in plaintext in the GoText.bin file, which allows local users to obtain that information.

Metrics

CVSS 2.0 2.1/10AV:L/AC:L/Au:N/C:P/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published: May 3, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-14255.0Uapplication Uguestbook 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers CVE-2005-14265.0Uapplication Ublog Reload stores sensitive information under the web root with insufficient access control, which allows remote attackers to CVE-2005-14277.5Uapplication Uphotogallery stores the database under the web document root, which allows remote attackers to obtain sensitive information vi CVE-2005-14287.5edit_image.asp in Uapplication Uphotogallery allows remote attackers to upload arbitrary files.CVE-2005-14297.5SQL injection vulnerability in login.asp in WWWguestbook 1.1 allows remote attackers to execute arbitrary SQL commands via the password para CVE-2005-14303.6Mac OS X 10.3.x and earlier uses insecure permissions for a pseudo terminal tty (pty) that is managed by a non-setuid program, which allows CVE-2005-14315.0The "record packet parsing" in GnuTLS 1.2 before 1.2.3 and 1.0 before 1.0.25 allows remote attackers to cause a denial of service, possibly CVE-2005-14334.6Multiple unknown vulnjerabilities HP OpenView Event Correlation Services (OV ECS) 3.32 and 3.33 allow attackers to cause a denial of service CVE-2005-14347.5Multiple unknown vulnerabilities in OpenView Network Node Manager (OV NNM) 6.2, 6.4, 7.01, and 7.50 allow attackers to cause a denial of ser CVE-2005-14357.5Open WebMail (OWM) before 2.51 20050430 allows remote authenticated users to execute arbitrary commands via shell metacharacters in a filena CVE-2005-14366.8Multiple cross-site scripting (XSS) vulnerabilities in osTicket allow remote attackers to inject arbitrary web script or HTML via (1) the t CVE-2005-14377.5Multiple SQL injection vulnerabilities in osTicket allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to admi