Vcard 2.9 and possibly other versions does not require authorization to run uninstall.php, which could allow remote attackers to uninstall Vcard and delete database tables via a direct request to uninstall.php.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-08T01:07:48.264Z
Reserved: 2005-05-04T00:00:00
Link: CVE-2004-1828

No data.

Status : Modified
Published: 2004-12-31T05:00:00.000
Modified: 2024-11-20T23:51:50.413
Link: CVE-2004-1828

No data.