20040203 Les Commentaires (PHP) Include filemailing list
http://marc.info/?l=bugtraq&m=107584083719763&w=2 CVE-2004-0246
Laurent Adda Les Commentaires 2.0 - PHP Script 'fonctions.lib.php' Remote File Inclusion
Record summary
CVE-2004-0246 has a selected CVSS score of 10.0; EIP currently links 3 catalogued exploits.
Description
Multiple PHP remote file inclusion vulnerabilities in (1) fonctions.lib.php, (2) derniers_commentaires.php, and (3) admin.php in Les Commentaires 2.0 allow remote attackers to execute arbitrary PHP code via the rep parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 3
Proofs of concept
3Catalogued exploits
ExploitDBLaurent Adda Les Commentaires 2.0 - PHP Script 'fonctions.lib.php' Remote File InclusionExploitDB exploitby Himeur NourredineNot analyzed1 file
ExploitDBLaurent Adda Les Commentaires 2.0 - PHP Script 'derniers_commentaires.php' Remote File InclusionExploitDB exploitby Himeur NourredineNot analyzed1 file
ExploitDBLaurent Adda Les Commentaires 2.0 - PHP Script 'admin.php' Remote File InclusionExploitDB exploitby Himeur NourredineNot analyzed1 file
References
510768Third-party advisory
http://secunia.com/advisories/10768 9536vdb entry
http://www.securityfocus.com/bid/9536 lescommentaires-multiple-file-include(15010)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/15010 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2004-0246