high7.5Public exploit code
CVE-2003-0394
objects.inc.php4 in BLNews 2.1.3 allows remote attackers to execute arbitrary PHP code via a Server[path] parameter that points to malicious code on an attacke…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- BLNews 2.1.3 - Remote File Inclusion2003-05-24 · webapps · php · Verified
Impact
objects.inc.php4 in BLNews 2.1.3 allows remote attackers to execute arbitrary PHP code via a Server[path] parameter that points to malicious code on an attacker-controlled web site.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Blnews | Blnews | Version 2.1.3 |