The default installation of Ultraboard 2000 2.11 creates the Skins, Database, and Backups directories with world-writeable permissions, which could allow local users to modify sensitive information or possibly insert and execute CGI programs.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/2197 | Vendor Advisory |
http://marc.info/?l=bugtraq&m=97933458505857&w=2 |
Configurations
Information
Published : 2001-03-11 21:00
Updated : 2016-10-17 19:09
NVD link : CVE-2001-0135
Mitre link : CVE-2001-0135
JSON object : View
CWE
Products Affected
ultrascripts
- ultraboard