CVE-2003-1385

CVE-2003-1385 affects Invision Power Board 1.1.1 via ipchat.php: the root_path parameter allows remote file inclusion when register_globals is enabled, enabling an attacker to reference a URL containing PHP code and execute it on the server. This results in remote code execution with the web serv...

CVE-2003-1385

ipchat.php in Invision Power Board 1.1.1 allows remote attackers to execute arbitrary PHP code, if registerglobals is enabled, by modifying the rootpath parameter to reference a URL on a remote web server that contains the code...

Invision Power Board ipchat.php root_path Parameter Remote File Inclusion

It is possible to make the remote host include PHP files hosted on a third-party server using Invision Power Board. The ipchat.php script fails to sanitize input passed to the 'rootpath' parameter. An attacker may use this flaw to inject arbitrary code in the remote host and gain a shell with the...