Vulnerability Description
Multiple PHP remote file inclusion vulnerabilities in ezContents 2.0.2 and earlier allow remote attackers to execute arbitrary PHP code from a remote web server, as demonstrated using (1) the GLOBALS[rootdp] parameter to db.php, or (2) the GLOBALS[language_home] parameter to archivednews.php, and a malicious version of lang_admin.php.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Visualshapers | Ezcontents | 1.40 |
References
- http://marc.info/?l=bugtraq&m=107651585921958&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15135
- http://marc.info/?l=bugtraq&m=107651585921958&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15135
FAQ
What is CVE-2004-0132?
CVE-2004-0132 is a vulnerability with a CVSS score of 7.5 (HIGH). Multiple PHP remote file inclusion vulnerabilities in ezContents 2.0.2 and earlier allow remote attackers to execute arbitrary PHP code from a remote web server, as demonstrated using (1) the GLOBALS[...
How severe is CVE-2004-0132?
CVE-2004-0132 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2004-0132?
Check the references section above for vendor advisories and patch information. Affected products include: Visualshapers Ezcontents.