PT-2004-1400 · Unknown · Les Commentaires

Nourredine Himeur · Published 2004-03-18 · Updated 2017-07-11 · CVE-2004-0246

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Les Commentaires version 2.0

Description The issue concerns remote file inclusion vulnerabilities in certain PHP files, specifically fonctions.lib.php, derniers commentaires.php, and admin.php. These vulnerabilities allow remote attackers to execute arbitrary PHP code via the rep parameter.

Recommendations For Les Commentaires version 2.0, consider restricting access to the vulnerable PHP files until a patch is available. As a temporary workaround, avoid using the rep parameter in the affected files to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2004-0246

Affected Products

Les Commentaires

References · 8

• 🔥 https://exploit-db.com/exploits/23619 · Exploit
• 🔥 https://exploit-db.com/exploits/23620 · Exploit
• 🔥 http://securityfocus.com/bid/9536 · Exploit
• 🔥 https://exploit-db.com/exploits/23621 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-0246 · Security Note
• http://marc.info/?l=bugtraq&m=107584083719763&w=2 · Note
• http://secunia.com/advisories/10768 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15010 · Note