CVE

Id
8560  
CVE No.
CVE-2004-0132  
Status
Candidate  
Description
Multiple PHP remote file inclusion vulnerabilities in ezContents 2.0.2 and earlier allow remote attackers to execute arbitrary PHP code from a remote web server, as demonstrated using (1) the GLOBALS[rootdp] parameter to db.php, or (2) the GLOBALS[language_home] parameter to archivednews.php, and a malicious version of lang_admin.php.  
Phase
Modified (20060907)  
Votes
ACCEPT(2) Armstrong, Baker | NOOP(3) Cole, Cox, Wall  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
53095 8560 CVE-2004-0132 BUGTRAQ:20040210 PHP Code Injection Vulnerabilities in ezContents 2.0.2 and prior  View
53096 8560 CVE-2004-0132 URL:http://marc.info/?l=bugtraq&m=107651585921958&w=2  View
53097 8560 CVE-2004-0132 XF:ezcontents-multiple-file-include(15135)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62802 JVNDB-2004-000143 Linux Kernel の XFS ファイルシステムにおける情報漏洩の脆弱性 ------------ CVE-2004-0133 8560 2.1 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000143.html  View