CVE-2004-0132

Multiple PHP remote file inclusion vulnerabilities in ezContents 2.0.2 and earlier allow remote attackers to execute arbitrary PHP code from a remote web server, as demonstrated using (1) the GLOBALS[rootdp] parameter to db.php, or (2) the GLOBALS[language_home] parameter to archivednews.php, and a malicious version of lang_admin.php.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

2.38% chance of exploitation in the next 30 days, 83th percentile

Published

2004-02-14

Updated

2024-08-08

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/23684
• https://www.exploit-db.com/exploits/23683

References

• CVE Record
• NVD entry

Related

• CVE-2004-0129
• CVE-2004-0158
• CVE-2004-0128
• CVE-2004-0159
• CVE-2004-0121
• CVE-2004-0164