CVE-2003-1385

ipchat.php in Invision Power Board 1.1.1 allows remote attackers to execute arbitrary PHP code, if register_globals is enabled, by modifying the root_path parameter to reference a URL on a remote web server that contains the code.

CVSS v2.0

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

4.00% chance of exploitation in the next 30 days, 90th percentile

Published

2007-10-19

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/22295

References

• CVE Record
• NVD entry

Related

• CVE-2003-1381
• CVE-2003-1386
• CVE-2003-1378
• CVE-2003-1387
• CVE-2003-1377
• CVE-2003-1396