← Database

CVE-2009-1460

MEDIUM CVSS: 4.6 Published: 2009-04-28 Modified: 2026-06-16

Description

razorCMS before 0.4 uses weak permissions for (1) admin/core/admin_config.php, which allows local users to obtain the administrator's password hash and FTP user credentials; and (2) the root directory, (3) datastore/, and (4) admin/core/, which allows local users to have an unspecified impact.

Affected Platforms

Razorcms Razorcms

Weakness Type

CWE-264

References