Privilege Escalation via mail parameter in Silent Storm Portal 2.1 and 2.2

CVE-2004-1567 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

profile.php in Silent Storm Portal 2.1 and 2.2 allows remote attackers to gain privileges by setting the mail parameter to 1, which is the value for an administrator.

Learn more about our Web Application Penetration Testing UK.