CVE-2004-0073 PHP remote file inclusion vulnerability in (1) config.php and (2) config_page.php for EasyDynamicPages 2.0 allows remote attackers to execute arbitrary PHP code by modifying the edp_relative_path para...
HighCVSS 7.5
EPSS 8.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
PHP remote file inclusion vulnerability in (1) config.php and (2) config_page.php for EasyDynamicPages 2.0 allows remote attackers to execute arbitrary PHP code by modifying the edp_relative_path parameter to reference a URL on a remote web server that contains a malicious serverdata.php script.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| stoitsov easydynamicpages | = 2.0 | No fix listed |
References
- 20040102 include() vuln in EasyDynamicPages v.2.0 mailing-list
- 10535 third-party-advisory
- 1008584 vdb-entry
- 3318 vdb-entry
- 3408 vdb-entry
- 9338 exploit patch vdb-entry vendor-advisory
- easydynamicpages-php-file-include(14136) vdb-entry