PHP remote file inclusion vulnerability in Bookmark4U 1.8.3 allows remote attackers to execute arbitrary PHP code viaa URL in the prefix parameter to (1) dbase.php, (2) config.php, or (3) common.load.php.
References
Link | Resource |
---|---|
http://archives.neohapsis.com/archives/bugtraq/2003-01/0049.html | Exploit Vendor Advisory |
http://www.iss.net/security_center/static/11009.php |
Configurations
Information
Published : 2003-12-30 21:00
Updated : 2008-09-05 13:36
NVD link : CVE-2003-1253
Mitre link : CVE-2003-1253
JSON object : View
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')
Products Affected
sangwan_kim
- bookmark4u