Quick.Forum 2.1.6 stores potentially sensitive information such as usernames, banned IP addresses, censored words, and backups under the web document root, which allows remote attackers to obtain that information via a direct request to (1) db/users.txt, (2) db/banList.txt, (3) db/censureWords.txt, or (4) backup files.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Quick.forum | Open_solution | 2.1.6 (including) | 2.1.6 (including) |