CVE-2004-1828: Belchior Foundry Vcard

Medium severity, CVSS 5.0. EPSS: 2.4% chance of exploitation in the next 30 days.

Vcard 2.9 and possibly other versions does not require authorization to run uninstall.php, which could allow remote attackers to uninstall Vcard and delete database tables via a direct request to uninstall.php.

Affected products

• Belchior Foundry Vcard: version 2.8 only; version 2.9 only

Published 2004-12-31. Last modified 2026-06-16.