CVE-2003-1436

PHP remote file inclusion vulnerability in nukebrowser.php in Nukebrowser 2.1 to 2.5 allows remote attackers to execute arbitrary PHP code via the filhead parameter.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:crossnuke:nukebrowser:2.1:*:*:*:*:*:*:*
cpe:2.3:a:crossnuke:nukebrowser:2.3:*:*:*:*:*:*:*
cpe:2.3:a:crossnuke:nukebrowser:2.5:*:*:*:*:*:*:*
cpe:2.3:a:crossnuke:nukebrowser:2.11:*:*:*:*:*:*:*
cpe:2.3:a:crossnuke:nukebrowser:2.20:*:*:*:*:*:*:*
cpe:2.3:a:crossnuke:nukebrowser:2.41:*:*:*:*:*:*:*

History

No history.

Information

Published : 2003-12-31 05:00

Updated : 2023-12-10 10:17


NVD link : CVE-2003-1436

Mitre link : CVE-2003-1436

CVE.ORG link : CVE-2003-1436


JSON object : View

Products Affected

crossnuke

  • nukebrowser
CWE
CWE-94

Improper Control of Generation of Code ('Code Injection')