NetSight
IP …
critical9.8Public exploit code

CVE-2004-0285

PHP remote file inclusion vulnerabilities in include/footer.inc.php in (1) AllMyVisitors, (2) AllMyLinks, and (3) AllMyGuests allow remote attackers to execute…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

PHP remote file inclusion vulnerabilities in include/footer.inc.php in (1) AllMyVisitors, (2) AllMyLinks, and (3) AllMyGuests allow remote attackers to execute arbitrary PHP code via a URL in the _AMVconfig[cfg_serverpath] parameter.

Affected products

VendorProductAffected versions
Allmyguests ProjectAllmyguests
Versions 0.1.2, 0.3, 0.4, 0.4.1
Allmylinks ProjectAllmylinks
Versions 0.3, 0.4, 0.4.1, 0.4.3, 0.4.4, 0.4.9
Allmyvisitors ProjectAllmyvisitors
Versions 0.3, 0.4

Weakness classification

CWE-829

References