high7.5Public exploit code
CVE-2004-1567
profile.php in Silent Storm Portal 2.1 and 2.2 allows remote attackers to gain privileges by setting the mail parameter to 1, which is the value for an adminis…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Silent Storm Portal - Multiple Vulnerabilities2004-09-30 · webapps · php · Verified
Impact
profile.php in Silent Storm Portal 2.1 and 2.2 allows remote attackers to gain privileges by setting the mail parameter to 1, which is the value for an administrator.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=109655763808924&w=2
- http://secunia.com/advisories/12704
- http://securitytracker.com/id?1011470
- http://www.securityfocus.com/bid/11284
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17555
- http://marc.info/?l=bugtraq&m=109655763808924&w=2
- http://secunia.com/advisories/12704
- http://securitytracker.com/id?1011470
- http://www.securityfocus.com/bid/11284
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17555