Security Advisory

CVE-2003-1240

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2005-11-16 07:37:00
Last updated 2024-08-08 02:19:45
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

PHP remote file inclusion vulnerability in CuteNews 0.88 allows remote attackers to execute arbitrary PHP code via a URL in the cutepath parameter in (1) shownews.php, (2) search.php, or (3) comments.php.