Description
The documentation for AJ-Fork 167 implies that users should set permissions for users.db.php to 777, which allows local users to execute arbitrary PHP code and gain privileges as the administrator.
References
- 11301 vdb-entry
- 1011484 vdb-entry
- http://echo.or.id/adv/adv07-y3dips-2004.txt
- 20041001 Multiple Vulnerabilities in AJ-Fork mailing-list
- aj-fork-usersdbphp-write-access(17571) vdb-entry