PT-2004-1284 · Easydynamicpages · Easydynamicpages

Published 2004-01-15 · Updated 2017-07-11 · CVE-2004-0073

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions EasyDynamicPages version 2.0

Description The issue allows remote attackers to execute arbitrary PHP code by modifying the edp relative path parameter to reference a URL on a remote web server that contains a malicious serverdata.php script. This is due to a remote file inclusion vulnerability in the config.php and config page.php files.

Recommendations For EasyDynamicPages version 2.0, consider restricting access to the edp relative path parameter to prevent modification and minimize the risk of exploitation. Additionally, avoid using the edp relative path parameter to reference URLs on remote web servers until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2004-0073

Affected Products

Easydynamicpages

References · 9

• 🔥 http://securityfocus.com/bid/9338 · Exploit
• 🔥 https://exploit-db.com/exploits/23507 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-0073 · Security Note
• http://securitytracker.com/id?1008584 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14136 · Note
• http://osvdb.org/3408 · Note
• http://secunia.com/advisories/10535 · Note
• http://marc.info/?l=bugtraq&m=107307457327707&w=2 · Note
• http://osvdb.org/3318 · Note