CVE-2004-1573
published 2004-12-31CVE-2004-1573: The documentation for AJ-Fork 167 implies that users should set permissions for users.db.php to 777, which allows local users to execute arbitrary PHP code and…
PriorityP427high7.2CVSS 2.0
AVLACLAuNCCICAC
EPSS
0.46%
36.8th percentile
The documentation for AJ-Fork 167 implies that users should set permissions for users.db.php to 777, which allows local users to execute arbitrary PHP code and gain privileges as the administrator.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| aj-fork | aj-fork | — | — |
| cutephp | cutenews | — | — |
| cutephp | cutenews | — | — |
| cutephp | cutenews | — | — |
| cutephp | cutenews | — | — |
| cutephp | cutenews | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://echo.or.id/adv/adv07-y3dips-2004.txthttp://marc.info/?l=bugtraq&m=109664986210763&w=2http://securitytracker.com/id?1011484http://www.securityfocus.com/bid/11301https://exchange.xforce.ibmcloud.com/vulnerabilities/17571http://echo.or.id/adv/adv07-y3dips-2004.txthttp://marc.info/?l=bugtraq&m=109664986210763&w=2http://securitytracker.com/id?1011484http://www.securityfocus.com/bid/11301https://exchange.xforce.ibmcloud.com/vulnerabilities/17571
2004-12-31
Published