Vulnerabilities > CVE-2004-2615 - Unspecified vulnerability in Cutephp Cutenews 1.3.6

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
cutephp
NVD
Published: 2004-12-31
Updated: 2024-11-20

Summary

The documentation for CuteNews 1.3.6 and possibly other versions specifies that files under cutenews/data must be manually given world-writable permissions, which allows local users to insert false news, delete news, and possibly gain privileges or have other unknown impact.

Vulnerable Configurations

Part Description Count
Application
Cutephp
1

References