CVE-2005-2029: Amarok Web Frontend

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

amaroK Web Frontend 1.3 stores the globals.inc file under the web root without a .php extension and insufficient access control, which allows remote attackers to obtain the database username and password via a direct request to the file.

Affected products

• Amarok Web Frontend: version 1.3 only

Published 2005-06-17. Last modified 2026-06-16.