medium5.0
CVE-2004-2195
PHP remote file inclusion vulnerability in index.php in Zanfi CMS lite 1.1 allows remote attackers to execute arbitrary PHP code via the inc parameter.
Impact
PHP remote file inclusion vulnerability in index.php in Zanfi CMS lite 1.1 allows remote attackers to execute arbitrary PHP code via the inc parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zanfi Solutions | Zanfi Cms Lite | Version 1.1 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/12792
- http://securitytracker.com/id?1011612
- http://www.osvdb.org/10676
- http://www.securityfocus.com/archive/1/378053
- http://www.securityfocus.com/bid/11362
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17691
- http://secunia.com/advisories/12792
- http://securitytracker.com/id?1011612
- http://www.osvdb.org/10676
- http://www.securityfocus.com/archive/1/378053
- http://www.securityfocus.com/bid/11362
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17691