← back
CVE-2004-1573

CVE-2004-1573

EPSS 0.5%
The documentation for AJ-Fork 167 implies that users should set permissions for users.db.php to 777, which allows local users to execute arbitrary PHP code and gain privileges as the administrator.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://echo.or.id/adv/adv07-y3dips-2004.txthttp://marc.info/?l=bugtraq&m=109664986210763&w=2http://securitytracker.com/id?1011484https://exchange.xforce.ibmcloud.com/vulnerabilities/17571http://www.securityfocus.com/bid/11301