Lucene search
HistoryOct 23, 2007 - 1:00 a.m.
CVE-2003-1459
cve-2003-1459
php
remote file inclusion
ttcms
ttforum
vulnerability
arbitrary code execution
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.7 High
AI Score
Confidence
Low
0.022 Low
EPSS
Percentile
89.5%
Multiple PHP remote file inclusion vulnerabilities in ttCMS 2.2 and ttForum allow remote attackers to execute arbitrary PHP code via the (1) template parameter in News.php or (2) installdir parameter in install.php.
Affected configurations
Node
ttcmsttcmsMatch2.2
ORttcmsttforumMatch1.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| ttcms:ttcms | ttcms | eq | 2.2 |
| ttcms:ttforum | ttcms ttforum | eq | 1.1 |
Related
nvd
nvd
CVE-2003-1459
2003-12-31 05:00:00
cvelist
cvelist
CVE-2003-1459
2007-10-23 01:00:00
nessus
nessus
ttCMS 2.2 Multiple Vulnerabilities
2003-05-19 00:00:00
ttforum Multiple Vulnerabilities
2003-05-10 00:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.7 High
AI Score
Confidence
Low
0.022 Low
EPSS
Percentile
89.5%
Related for CVE-2003-1459