CVE-2003-1383: Logicworks Web ERP

High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days.

WEB-ERP 0.1.4 and earlier allows remote attackers to obtain sensitive information via an HTTP request for the logicworks.ini file, which contains the MySQL database username and password.

Affected products

• Logicworks Web ERP: up to and including 0.1.4

Published 2003-12-31. Last modified 2026-06-16.