Unscored severity · published Dec 31, 2003
CVE-2003-1412
PHP remote file inclusion vulnerability in index.php for GONiCUS System Administrator (GOsa) 1.0 allows remote attackers to execute arbitrary PHP code via the plugin parameter to…
–
CVSS
2.7%
EPSS
No
On KEV
Description
PHP remote file inclusion vulnerability in index.php for GONiCUS System Administrator (GOsa) 1.0 allows remote attackers to execute arbitrary PHP code via the plugin parameter to (1) 3fax/1blocklists/index.php; (2) 6departamentadmin/index.php, (3) 5terminals/index.php, (4) 4mailinglists/index.php, (5) 3departaments/index.php, and (6) 2groupd/index.php in 2administration/; or (7) the base parameter to include/help.php.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.7% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GS
Gonicus System Administration · Gonicus
1.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2003-1412
CVE.org
https://www.cve.org/CVERecord?id=CVE-2003-1412
lists.grok.org.uk
http://lists.grok.org.uk/pipermail/full-disclosure/2003-February/003932.html
secunia.com
http://secunia.com/advisories/8120
www.securityfocus.com
http://www.securityfocus.com/archive/1/313282/30/25760/threaded
Exploit
http://www.securityfocus.com/bid/6922
www.securitytracker.com
http://www.securitytracker.com/id?1006162
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/11408
More from Gonicus System Administration
–
CVE-2007-0313
Unspecified vulnerability in GONICUS System Administration (GOsa) before 2.5.8 allows remote authenticated users to modify certain settings, including the admin password, via…