high7.5Public exploit code
CVE-2004-0073
PHP remote file inclusion vulnerability in (1) config.php and (2) config_page.php for EasyDynamicPages 2.0 allows remote attackers to execute arbitrary PHP cod…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- EasyDynamicPages 1.0 - 'config_page.php' PHP Remote File Inclusion2004-01-02 · webapps · php · Verified
Impact
PHP remote file inclusion vulnerability in (1) config.php and (2) config_page.php for EasyDynamicPages 2.0 allows remote attackers to execute arbitrary PHP code by modifying the edp_relative_path parameter to reference a URL on a remote web server that contains a malicious serverdata.php script.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Stoitsov | Easydynamicpages | Version 2.0 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=107307457327707&w=2
- http://secunia.com/advisories/10535
- http://securitytracker.com/id?1008584
- http://www.osvdb.org/3318
- http://www.osvdb.org/3408
- http://www.securityfocus.com/bid/9338
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14136
- http://marc.info/?l=bugtraq&m=107307457327707&w=2
- http://secunia.com/advisories/10535
- http://securitytracker.com/id?1008584
- http://www.osvdb.org/3318
- http://www.osvdb.org/3408
- http://www.securityfocus.com/bid/9338
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14136