← Back

CVE-2004-1573

nvd nist
Published: Dec 31, 2004Modified: Apr 16, 2026

JSON object

Loading...
7.2
Vector
AV:L/AC:L/Au:N/C:C/I:C/A:C
Exploitability: 3.9 / Impact: 10.0
Source: NVD

Description

The documentation for AJ-Fork 167 implies that users should set permissions for users.db.php to 777, which allows local users to execute arbitrary PHP code and gain privileges as the administrator.

Affected (6)

Aj Fork
1 product
Aj Fork
Cutephp
1 product
Cutenews
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Aj Fork
Version 167
Cutephp
Cutenews
Version 0.88
Cutenews
Version 1.3.1
Cutenews
Version 1.3.2
Cutenews
Version 1.3.6
Cutenews
Version 1.3

References (10)

Source: cve@mitre.org
ExploitVendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.