Security Advisory

CVE-2004-1573

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2005-02-20 05:00:00
Last updated 2024-08-08 00:53:24
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

The documentation for AJ-Fork 167 implies that users should set permissions for users.db.php to 777, which allows local users to execute arbitrary PHP code and gain privileges as the administrator.