CVE-2003-1410

Published: Dec 31, 2003Modified: Apr 16, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

PHP remote file inclusion vulnerability in email.php (aka email.php3) in Cedric Email Reader 0.2 and 0.3 allows remote attackers to execute arbitrary PHP code via the cer_skin parameter.

Affected (2)

Products: Isoca: Cedric Email Reader

Isoca

1 product

Cedric Email Reader

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Isoca Cedric Email Reader	Version 0.2
Isoca Cedric Email Reader	Version 0.3

Related CWEs

CWE-94

Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (10)

http://secunia.com/advisories/8024

Source: cve@mitre.org

http://www.osvdb.org/5487

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/311173

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/bid/6818

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/11278

Source: cve@mitre.org

http://secunia.com/advisories/8024