Lucene search
HistoryDec 31, 2003 - 5:00 a.m.
CVE-2003-1385
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.4
Confidence
High
EPSS
0.031
Percentile
91.3%
ipchat.php in Invision Power Board 1.1.1 allows remote attackers to execute arbitrary PHP code, if register_globals is enabled, by modifying the root_path parameter to reference a URL on a remote web server that contains the code.
Affected configurations
Node
invision_power_servicesinvision_power_boardMatch1.1.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| invision_power_services | invision_power_board | 1.1.1 | cpe:2.3:a:invision_power_services:invision_power_board:1.1.1:*:*:*:*:*:*:* |
Related
exploitdb
exploitdb
Invision Board 1.1.1 - 'ipchat.php' Remote File Inclusion
2003-02-27 00:00:00
cve
cve
CVE-2003-1385
2007-10-19 10:00:00
nessus
nessus
Invision Power Board ipchat.php root_path Parameter Remote File Inclusion
2003-02-27 00:00:00
cvelist
cvelist
CVE-2003-1385
2007-10-19 10:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.4
Confidence
High
EPSS
0.031
Percentile
91.3%
Related for NVD:CVE-2003-1385