medium5.0Public exploit code
CVE-2004-1828
Vcard 2.9 and possibly other versions does not require authorization to run uninstall.php, which could allow remote attackers to uninstall Vcard and delete dat…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Belchior Foundry VCard 2.8 - Authentication Bypass2004-03-17 · webapps · php · Verified
Impact
Vcard 2.9 and possibly other versions does not require authorization to run uninstall.php, which could allow remote attackers to uninstall Vcard and delete database tables via a direct request to uninstall.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Belchior Foundry | Vcard | Versions 2.8, 2.9 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=107957312531199&w=2
- http://www.securityfocus.com/bid/9910
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15522
- http://marc.info/?l=bugtraq&m=107957312531199&w=2
- http://www.securityfocus.com/bid/9910
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15522