TI-2005-01155 CVE-2005-1220 · GHSA-p6r7-3wrc-qfh7Shoutbox SCRIPT 3.0.2 and earlier allows remote attackers to obtain sensitive information…Priority LOW 36Shoutbox SCRIPT 3.0.2 and earlier allows remote attackers to obtain sensitive information via a direct request to db/settings.dat, which displays usernames and password hashes.CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.0159 · Published 2005-04-22 · No fix listed