Back

CVE-2003-1410

PHP remote file inclusion vulnerability in email.php (aka email.php3) in Cedric Email Reader 0.2 and 0.3 allows remote attackers to execute arbitrary PHP code via the cer_skin parameter.

Published: Dec 31, 2003 Modified: Jun 16, 2026
CWE-94

CVSS Metrics

Affected Products (2)

Vendor Product Version
isoca cedric_email_reader 0.2
isoca cedric_email_reader 0.3

GitHub Security Advisory GHSA-xhx4-qmff-87w3

PHP remote file inclusion vulnerability in email.php (aka email.php3) in Cedric Email Reader 0.2...

Risk Scores

CVSS Score 6.8 / 10
EPSS Score 2.26%

Top 19% most likely to be exploited

Threat Score 27.9 / 100

Data Sources

NVD EPSS GitHub