CVE-2003-1412 in System Administrationinfo

Summary

PHP remote file inclusion vulnerability in index.php for GONiCUS System Administrator (GOsa) 1.0 allows remote attackers to execute arbitrary PHP code via the plugin parameter to (1) 3fax/1blocklists/index.php; (2) 6departamentadmin/index.php, (3) 5terminals/index.php, (4) 4mailinglists/index.php, (5) 3departaments/index.php, and (6) 2groupd/index.php in 2administration/; or (7) the base parameter to include/help.php.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservation

10/19/2007

Disclosure

12/31/2003

CPE

ready

Exploit

Download

CVSS

7.3

EPSS

0.04745

Activities

Very Low

Sources

Do you know our Splunk app?

Download it now for free!