CVE-2004-1652: phpScheduleIt 1.0.0 RC1 does not clear administrative privileges if the administrator logs in as a normal u...

Security readout for executives and security teams

CVE-2004-1652 is a reported privilege-handling flaw in phpScheduleIt 1.0.0 RC1. If an administrator logs in as a normal user, administrative privileges may not be cleared. A person with physical access to the same system could gain administrative access. Public data does not provide CVSS, confirmed patch details, or active exploitation evidence. Exposure is likely limited to organizations still running phpScheduleIt 1.0.0 RC1, especially where administrators and normal users share terminals, browsers, or sessions. The source bundle does not substantiate other versions, forks, or products as affected. Prioritize as an exposure discovery and legacy cleanup item, not as an internet-scale emergency based on current evidence. Escalate if phpScheduleIt 1.0.0 RC1 is found on shared systems or in operational environments with weak physical access control. Mitigation focus: Identify whether phpScheduleIt 1.0.0 RC1 is deployed anywhere.; Check project or vendor archives for fixed-version guidance.; Avoid shared administrator workstations for this application..

Prepared

Jun 30, 2026, 00:10 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.