high7.5
CVE-2004-1660
PHP remote file inclusion vulnerability in CuteNews 1.3.6 and earlier allows remote attackers to execute arbitrary PHP code via the cutepath parameter to (1) s…
Impact
PHP remote file inclusion vulnerability in CuteNews 1.3.6 and earlier allows remote attackers to execute arbitrary PHP code via the cutepath parameter to (1) show_archives.php or (2) show_news.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cutephp | Cutenews | through 1.3.6 |
References
- NVD record
- CVE.org record
- http://seclists.org/lists/bugtraq/2004/Sep/0014.html
- http://secunia.com/advisories/12432
- http://www.7a69ezine.org/node/view/130
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17288
- http://seclists.org/lists/bugtraq/2004/Sep/0014.html
- http://secunia.com/advisories/12432
- http://www.7a69ezine.org/node/view/130
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17288