CVE-2004-1261

asp2php 0.76.23 - Remote Code Execution via Buffer Overflow in Preparse Function

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2004-1261. PoCs published by Qiao Zhang.

AI-analyzed exploit summary The provided text describes a buffer overflow vulnerability in asp2php (CVE-2004-1261) when converting ASP files to PHP, allowing remote code execution. However, no actual exploit code is included in the snippet.

Description

Multiple buffer overflows in the preparse function in asp2php 0.76.23 allow remote attackers to execute arbitrary code via crafted ASP scripts.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Qiao Zhang · textremotewindows
https://www.exploit-db.com/exploits/25016

The provided text describes a buffer overflow vulnerability in asp2php (CVE-2004-1261) when converting ASP files to PHP, allowing remote code execution. However, no actual exploit code is included in the snippet.

Classification
Writeup 90%
Attack Type
Rce
Complexity
Moderate
Reliability
Theoretical
Target: asp2php (version not specified)
No auth needed
Prerequisites: Victim must process a malicious ASP file with asp2php
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/18585
Exploit, Vendor Advisory x_refsource_misc
http://tigger.uic.edu/~jlongs2/holes/asp2php.txt

Scores

EPSS 0.0883
EPSS Percentile 94.5%

Details

Status published
Products (1)
asp2php/asp2php 0.76.23
Published Jan 10, 2005
Tracked Since Feb 18, 2026