CVE-2004-1828

Vcard 2.9 and possibly other versions does not require authorization to run uninstall.php, which could allow remote attackers to uninstall Vcard and delete database tables via a direct request to uninstall.php.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2004-12-31

Last modified

2024-08-08

Affected products

• Vcard (Belchior Foundry)

References

• http://marc.info/?l=bugtraq&m=107957312531199&w=2
• http://www.securityfocus.com/bid/9910
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15522