RCE in Adalis Infomatique D Forum
CVE-2003-1406
PHP remote file inclusion vulnerability in D-Forum 1.00 through 1.11 allows remote attackers to execute arbitrary PHP code via a URL in the (1) my_header parameter to header.php3 or (2) my_footer parameter to footer.php3.
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.025 (83.3th percentile) — read the EPSS interpretation.
Affected products
- Adalis_infomatique D_forum — versions 1.0, 1.10, 1.11
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (mailing-list, x_refsource_VULNWATCH, Exploit)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_XF)