Lucene search
MitreCVE-2003-1240HistoryNov 16, 2005 - 7:37 a.m.
CVE-2003-1240
2005-11-1607:37:00
CWE-94
mitre
web.nvd.nist.gov
153
cve
2003
1240
php
remote file inclusion
vulnerability
cutenews 0.88
arbitrary code execution
url
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.6
Confidence
High
EPSS
0.018
Percentile
88.4%
PHP remote file inclusion vulnerability in CuteNews 0.88 allows remote attackers to execute arbitrary PHP code via a URL in the cutepath parameter in (1) shownews.php, (2) search.php, or (3) comments.php.
Affected configurations
Node
cutephpcutenewsMatch0.88
Related
exploitdb
exploitdb
CuteNews 0.88 - 'search.php' Remote File Inclusion
2003-02-25 00:00:00
CuteNews 0.88 - 'comments.php' Remote File Inclusion
2003-02-25 00:00:00
CuteNews 0.88 - 'shownews.php' Remote File Inclusion
2003-02-25 00:00:00
nessus
nessus
CuteNews Multiple Script cutepath Parameter Arbitrary Command Execution
2003-02-28 00:00:00
cvelist
cvelist
CVE-2003-1240
2005-11-16 07:37:00
nvd
nvd
CVE-2003-1240
2003-12-31 05:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.6
Confidence
High
EPSS
0.018
Percentile
88.4%
Related for CVE-2003-1240