Vulnerability in Phpforum

CVE-2003-0559

mainfile.php in phpforum 2 RC-1, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code by modifying the MAIN_PATH parameter to reference a URL on a remote web server that contains the code.

EPSS: 0.014 (69.0th percentile) — read the EPSS interpretation.

Affected products

  • Phpforum — versions 2.0_rc1
  • N/a — versions n/a

References