medium6.8Public exploit code
CVE-2003-1459
Multiple PHP remote file inclusion vulnerabilities in ttCMS 2.2 and ttForum allow remote attackers to execute arbitrary PHP code via the (1) template parameter…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ttCMS 2.2 / ttForum 1.1 - 'install.php?installdir' Remote File Inclusion2003-05-09 · webapps · php · Verified
- ttCMS 2.2 / ttForum 1.1 - 'news.php?template' Remote File Inclusion2003-05-09 · webapps · php · Verified
Impact
Multiple PHP remote file inclusion vulnerabilities in ttCMS 2.2 and ttForum allow remote attackers to execute arbitrary PHP code via the (1) template parameter in News.php or (2) installdir parameter in install.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ttcms | Ttcms | Version 2.2 |
| Ttcms | Ttforum | Version 1.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/3278
- http://www.securityfocus.com/archive/1/321000
- http://www.securityfocus.com/bid/7542
- https://exchange.xforce.ibmcloud.com/vulnerabilities/12271
- http://securityreason.com/securityalert/3278
- http://www.securityfocus.com/archive/1/321000
- http://www.securityfocus.com/bid/7542
- https://exchange.xforce.ibmcloud.com/vulnerabilities/12271