Security Advisory

CVE-2004-0132

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2004-02-14 05:00:00

Last updated 2024-08-08 00:10:02

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Multiple PHP remote file inclusion vulnerabilities in ezContents 2.0.2 and earlier allow remote attackers to execute arbitrary PHP code from a remote web server, as demonstrated using (1) the GLOBALS[rootdp] parameter to db.php, or (2) the GLOBALS[language_home] parameter to archivednews.php, and a malicious version of lang_admin.php.

← Browse all CVEs View on cve.org ↗