CVE-2002-1886: Tightauction

Medium severity, CVSS 5.0. EPSS: 2.8% chance of exploitation in the next 30 days.

TightAuction 3.0 stores config.inc under the web document root with insufficient access control, which allows remote attackers to obtain the database username and password.

Affected products

• Tightauction Tightauction: version 3.0 only

Published 2002-12-31. Last modified 2026-06-16.