Lucene search

K
cve[email protected]CVE-2003-1256
HistoryOct 03, 2022 - 4:15 p.m.

CVE-2003-1256

2022-10-0316:15:43
web.nvd.nist.gov
27
cve-2003-1256
e-theni
aff_liste_langue.php
remote code execution
security vulnerability

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.6 High

AI Score

Confidence

High

0.054 Low

EPSS

Percentile

93.1%

aff_liste_langue.php in E-theni allows remote attackers to execute arbitrary PHP code by modifying the rep_include parameter to reference a URL on a remote web server that contains para_langue.php.

Affected configurations

NVD
Node
e-thenie-theni
CPENameOperatorVersion
e-theni:e-thenie-thenieq*

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.6 High

AI Score

Confidence

High

0.054 Low

EPSS

Percentile

93.1%

Related for CVE-2003-1256