CVE-2005-0823 EXPLOIT
4.6
MEDIUM · CVSS 2.0 · EPSS 1.1% (pctl 64)
Patch early
A public exploit exists.
Description
ThePoolClub (1) iPool and (2) iSnooker 1.6.81 and earlier stores usernames and passwords in cleartext in the MyDetails.txt file, which allows local users to gain privileges.
Scoring
| CVSS | 4.6 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:L/AC:L/Au:N/C:P/I:P/A:P |
| EPSS | 1.06% — more likely to be exploited than 64% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2005-05-02 |
| Last modified | 2026-06-16 |
Affected (2)
| Vendor | Product |
|---|---|
| thepoolclub | ipool |
| thepoolclub | isnooker |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | iSnooker 1.6.8 - Local Password Disclosure | 2005-03-16 |
| exploit-db | iPool 1.6.81 - Local Password Disclosure | 2005-03-16 |
References
- http://secunia.com/advisories/14629
- http://securitytracker.com/id?1013458
- http://securitytracker.com/id?1013459
- http://www.securityfocus.com/bid/12830
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19717
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19718
- http://secunia.com/advisories/14629
- http://securitytracker.com/id?1013458
- http://securitytracker.com/id?1013459
- http://www.securityfocus.com/bid/12830
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19717
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19718
→ the Explorer · watch your stack · NVD