critical9.8Public exploit code
CVE-2014-4170
A Privilege Escalation Vulnerability exists in Free Reprintables ArticleFR 11.06.2014 due to insufficient access restrictions in the data.php script, which cou…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ArticleFR 11.06.2014 - 'data.php' Privilege Escalation2014-08-02 · webapps · php
Impact
A Privilege Escalation Vulnerability exists in Free Reprintables ArticleFR 11.06.2014 due to insufficient access restrictions in the data.php script, which could let a remote malicious user obtain access or modify or delete database information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Freereprintables | Articlefr | through 3.0.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/127701/Free-Reprintables-ArticleFR-11.06.2014-Improper-Access-Control.html
- http://www.exploit-db.com/exploits/34245
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95051
- https://www.securityfocus.com/bid/68980
- http://packetstormsecurity.com/files/127701/Free-Reprintables-ArticleFR-11.06.2014-Improper-Access-Control.html
- http://www.exploit-db.com/exploits/34245
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95051
- https://www.securityfocus.com/bid/68980