CVE-2004-1592

PHP remote file inclusion vulnerability in index.php in ocPortal 1.0.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the req_path parameter to reference a URL on a remote web server that contains a malicious funcs.php script.

CVSS Metrics

Affected Products (1)

GitHub Security Advisory GHSA-jw79-gm26-2pgj

PHP remote file inclusion vulnerability in index.php in ocPortal 1.0.3 and earlier allows remote...

References (10)

• http://marc.info/?l=bugtraq&m=109763314312828&w=2
• http://secunia.com/advisories/12811/ Patch
• http://www.hackgen.org/advisories/hackgen-2004-002.txt Exploit, Vendor Advisory
• http://www.securityfocus.com/bid/11368 Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17699
• http://marc.info/?l=bugtraq&m=109763314312828&w=2
• http://secunia.com/advisories/12811/ Patch
• http://www.hackgen.org/advisories/hackgen-2004-002.txt Exploit, Vendor Advisory
• http://www.securityfocus.com/bid/11368 Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17699