Lucene search

MitreCVE-2003-1459

HistoryOct 23, 2007 - 1:00 a.m.

CVE-2003-1459

2007-10-2301:00:00

CWE-94

mitre

web.nvd.nist.gov

cve-2003-1459

php

remote file inclusion

ttcms

ttforum

vulnerability

arbitrary code execution

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.7

Confidence

Low

EPSS

0.019

Percentile

88.9%

JSON

Multiple PHP remote file inclusion vulnerabilities in ttCMS 2.2 and ttForum allow remote attackers to execute arbitrary PHP code via the (1) template parameter in News.php or (2) installdir parameter in install.php.

Affected configurations

Nvd

Node

ttcmsttcmsMatch2.2

ttcmsttforumMatch1.1

VendorProductVersionCPE
ttcmsttcms2.2cpe:2.3:a:ttcms:ttcms:2.2:*:*:*:*:*:*:*
ttcmsttforum1.1cpe:2.3:a:ttcms:ttforum:1.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ttcms	ttcms	2.2	cpe:2.3:a:ttcms:ttcms:2.2:::::::*
ttcms	ttforum	1.1	cpe:2.3:a:ttcms:ttforum:1.1:::::::*

References

securityreason.com/securityalert/3278

www.securityfocus.com/archive/1/321000

www.securityfocus.com/bid/7542

exchange.xforce.ibmcloud.com/vulnerabilities/12271

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.7

Confidence

Low

EPSS

0.019

Percentile

88.9%

JSON

Related for CVE-2003-1459