Lucene search

[email protected]CVE-2004-1704

HistoryFeb 26, 2005 - 5:00 a.m.

CVE-2004-1704

2005-02-2605:00:00

[email protected]

web.nvd.nist.gov

cve-2004-1704

wpquiz

privilege escalation

adminrestore.php

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.3 High

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.2%

JSON

WpQuiz 2.60b1 through 2.60b8 allows remote attackers to gain privileges via a direct request to adminrestore.php in the extras directory.

Affected configurations

NVD

Node

wire_plastic_designwpquizMatch2.60b1

wire_plastic_designwpquizMatch2.60b2

wire_plastic_designwpquizMatch2.60b3

wire_plastic_designwpquizMatch2.60b4

wire_plastic_designwpquizMatch2.60b5

wire_plastic_designwpquizMatch2.60b6

wire_plastic_designwpquizMatch2.60b7

wire_plastic_designwpquizMatch2.60b8

CPENameOperatorVersion
wire_plastic_design:wpquizwire plastic design wpquizeq2.60b1
wire_plastic_design:wpquizwire plastic design wpquizeq2.60b2
wire_plastic_design:wpquizwire plastic design wpquizeq2.60b3
wire_plastic_design:wpquizwire plastic design wpquizeq2.60b4
wire_plastic_design:wpquizwire plastic design wpquizeq2.60b5
wire_plastic_design:wpquizwire plastic design wpquizeq2.60b6
wire_plastic_design:wpquizwire plastic design wpquizeq2.60b7
wire_plastic_design:wpquizwire plastic design wpquizeq2.60b8

CPE	Name	Operator	Version
wire_plastic_design:wpquiz	wire plastic design wpquiz	eq	2.60b1
wire_plastic_design:wpquiz	wire plastic design wpquiz	eq	2.60b2
wire_plastic_design:wpquiz	wire plastic design wpquiz	eq	2.60b3
wire_plastic_design:wpquiz	wire plastic design wpquiz	eq	2.60b4
wire_plastic_design:wpquiz	wire plastic design wpquiz	eq	2.60b5
wire_plastic_design:wpquiz	wire plastic design wpquiz	eq	2.60b6
wire_plastic_design:wpquiz	wire plastic design wpquiz	eq	2.60b7
wire_plastic_design:wpquiz	wire plastic design wpquiz	eq	2.60b8

References

marc.info/?l=bugtraq&m=109122270013514&w=2

www.osvdb.org/8321

exchange.xforce.ibmcloud.com/vulnerabilities/16848

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.3 High

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.2%

JSON

Related for CVE-2004-1704

nvd1 cvelist1