CVE-2003-1406

Adalis Infomatique D Forum - Code Injection

Title source: rule

Description

PHP remote file inclusion vulnerability in D-Forum 1.00 through 1.11 allows remote attackers to execute arbitrary PHP code via a URL in the (1) my_header parameter to header.php3 or (2) my_footer parameter to footer.php3.

Exploits (2)

exploitdb WRITEUP VERIFIED

by frog · textwebappsphp

https://www.exploit-db.com/exploits/22257

View Code ZIP pw:eip

exploitdb WRITEUP VERIFIED

by frog · textwebappsphp

https://www.exploit-db.com/exploits/22256

View Code ZIP pw:eip

References (3)

[Exploit] http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0072.html

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/6879

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/11342

Scores

EPSS 0.0144

EPSS Percentile 80.5%

Classification

CWE

CWE-94

Status draft

Affected Products (3)

adalis_infomatique/d_forum

Timeline

Published Dec 31, 2003

Tracked Since Feb 18, 2026