RCE in Sangwan Kim Bookmark4u

CVE-2003-1253

PHP remote file inclusion vulnerability in Bookmark4U 1.8.3 allows remote attackers to execute arbitrary PHP code viaa URL in the prefix parameter to (1) dbase.php, (2) config.php, or (3) common.load.php.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.014 (70.4th percentile) — read the EPSS interpretation.

Affected products

Sangwan_kim Bookmark4u — versions 1.8.3
N/a — versions n/a

Weakness classification (CWE)

CWE-94 — Code Injection

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (Vendor Advisory, mailing-list, Exploit, x_refsource_BUGTRAQ)