Lucene search

MitreCVE-2003-1411

HistoryOct 20, 2007 - 10:00 a.m.

CVE-2003-1411

2007-10-2010:00:00

CWE-94

mitre

web.nvd.nist.gov

php

remote file inclusion

vulnerability

email reader

cedric email reader

nvd

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

Confidence

Low

EPSS

0.051

Percentile

93.0%

JSON

PHP remote file inclusion vulnerability in emailreader_execute_on_each_page.inc.php in Cedric Email Reader 0.4 allows remote attackers to execute arbitrary PHP code via the emailreader_ini parameter.

Affected configurations

Nvd

Node

isocacedric_email_readerMatch0.4

VendorProductVersionCPE
isocacedric_email_reader0.4cpe:2.3:a:isoca:cedric_email_reader:0.4:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
isoca	cedric_email_reader	0.4	cpe:2.3:a:isoca:cedric_email_reader:0.4:::::::*

References

secunia.com/advisories/8024

www.osvdb.org/5900

www.securityfocus.com/archive/1/311173

www.securityfocus.com/bid/6820

exchange.xforce.ibmcloud.com/vulnerabilities/11278

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

Confidence

Low

EPSS

0.051

Percentile

93.0%

JSON

Related for CVE-2003-1411