Aj-fork

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Aj-fork records in CISA KEV

No Aj-fork vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Aj-fork 3 records LOW

Records

3 records

TI-2004-01449 CVE-2004-1573 · GHSA-xm72-c99x-fm79

The documentation for AJ-Fork 167 implies that users should set permissions for…

LOW 32

The documentation for AJ-Fork 167 implies that users should set permissions for users.db.php to 777, which allows local users to execute arbitrary PHP code and gain privileges as the administrator.

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.00464 Published 2005-02-20 No fix listed

TI-2004-01448 CVE-2004-1572 · GHSA-3h69-7jmr-q5h4

AJ-Fork 167 does not restrict access to directories such as (1) data, (2) inc, (3)…

LOW 27

AJ-Fork 167 does not restrict access to directories such as (1) data, (2) inc, (3) plugins, (4) skins, or (5) tools, which allows remote attackers to list files in those directories via a direct HTTP request.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02156 Published 2005-02-20 No fix listed

TI-2004-01447 CVE-2004-1571 · GHSA-g4v6-4jj6-xg55

AJ-Fork 167 allows remote attackers to gain sensitive information via a direct request to…

LOW 26

AJ-Fork 167 allows remote attackers to gain sensitive information via a direct request to (1) auto-acronyms.php, (2) auto-archive.php, (3) ount-article-views.php, (4) kses.php, (5) custom-quick-tags.php, (6) disable-all-…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0155 Published 2005-02-20 No fix listed

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0