critical10.0Public exploit code
CVE-2004-0246
Multiple PHP remote file inclusion vulnerabilities in (1) fonctions.lib.php, (2) derniers_commentaires.php, and (3) admin.php in Les Commentaires 2.0 allow rem…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Laurent Adda Les Commentaires 2.0 - PHP Script 'admin.php' Remote File Inclusion2004-01-30 · webapps · php · Verified
- Laurent Adda Les Commentaires 2.0 - PHP Script 'derniers_commentaires.php' Remote File Inclusion2004-01-30 · webapps · php · Verified
- Laurent Adda Les Commentaires 2.0 - PHP Script 'fonctions.lib.php' Remote File Inclusion2004-01-30 · webapps · php · Verified
Impact
Multiple PHP remote file inclusion vulnerabilities in (1) fonctions.lib.php, (2) derniers_commentaires.php, and (3) admin.php in Les Commentaires 2.0 allow remote attackers to execute arbitrary PHP code via the rep parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Laurent Adda | Les Commentaires | Version 2.0 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=107584083719763&w=2
- http://secunia.com/advisories/10768/
- http://www.securityfocus.com/bid/9536
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15010
- http://marc.info/?l=bugtraq&m=107584083719763&w=2
- http://secunia.com/advisories/10768/
- http://www.securityfocus.com/bid/9536
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15010