Lucene search
HistoryJul 02, 2003 - 4:00 a.m.
CVE-2003-0394
blnews
remote code execution
objects.inc.php4
cve-2003-0394
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
High
0.028 Low
EPSS
Percentile
90.6%
objects.inc.php4 in BLNews 2.1.3 allows remote attackers to execute arbitrary PHP code via a Server[path] parameter that points to malicious code on an attacker-controlled web site.
Affected configurations
Node
blnewsblnewsMatch2.1.3
| CPE | Name | Operator | Version |
|---|---|---|---|
| blnews:blnews | blnews | eq | 2.1.3 |
Related
nvd
nvd
CVE-2003-0394
2003-07-02 04:00:00
cvelist
cvelist
CVE-2003-0394
2003-06-10 04:00:00
nessus
nessus
BLNews objects.inc.php4 Server[path] Parameter Remote File Inclusion
2003-05-27 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
High
0.028 Low
EPSS
Percentile
90.6%
Related for CVE-2003-0394