Vulnerability in Brickhost Phpscheduleit
CVE-2004-1652
phpScheduleIt 1.0.0 RC1 does not clear administrative privileges if the administrator logs in as a normal user, which allows users with physical access to gain administrative privileges.
EPSS: 0.011 (62.4th percentile) — read the EPSS interpretation.
Affected products
- Brickhost Phpscheduleit — versions 1.0
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (vdb-entry, x_refsource_XF)