CVE-2003-1402

Published: Dec 31, 2003Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

PHP remote file inclusion vulnerability in hit.php for Kietu 2.0 and 2.3 allows remote attackers to execute arbitrary PHP code via the url_hit parameter, a different vulnerability than CVE-2006-5015.

Affected (2)

Products: Kietu: Kietu

Kietu

1 product

Kietu

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Kietu Kietu	Version 2.0
Kietu Kietu	Version 2.3

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (10)

http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0071.html

Source: cve@mitre.org

http://secunia.com/advisories/10754

Source: cve@mitre.org

Vendor Advisory

http://www.osvdb.org/3777

Source: cve@mitre.org

http://www.securityfocus.com/bid/6863

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/11341

Source: cve@mitre.org

http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0071.html