high7.5Public exploit code
CVE-2004-1820
PHP remote file inclusion vulnerability in displaycategory.php in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to execute arbitrary PHP co…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WarpSpeed 4nAlbum Module 0.92 - 'displaycategory.php?basepath' Remote File Inclusion2004-03-15 · webapps · php · Verified
Impact
PHP remote file inclusion vulnerability in displaycategory.php in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to execute arbitrary PHP code by modifying the basepath parameter to reference a URL on a remote web server that contains fileFunctions.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Warpspeed | 4nalbum Module | Version 0.92 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=107937780222514&w=2
- http://secunia.com/advisories/11134
- http://www.osvdb.org/4292
- http://www.securityfocus.com/bid/9881
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15496
- http://marc.info/?l=bugtraq&m=107937780222514&w=2
- http://secunia.com/advisories/11134
- http://www.osvdb.org/4292
- http://www.securityfocus.com/bid/9881
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15496