CVE-2004-1567

Description

profile.php in Silent Storm Portal 2.1 and 2.2 allows remote attackers to gain privileges by setting the mail parameter to 1, which is the value for an administrator.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/17555

https://euvd.enisa.europa.eu/vulnerability/EUVD-2004-1561

http://www.securityfocus.com/bid/11284

http://securitytracker.com/id?1011470

http://secunia.com/advisories/12704

http://marc.info/?l=bugtraq&m=109655763808924&w=2

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS