CVE-2004-1403

Published: Dec 31, 2004Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

PHP remote file inclusion vulnerability in index.php in GNUBoard 3.39 and earlier allows remote attackers to execute arbitrary PHP code by modifying the doc parameter to reference a URL on a remote web server that contains the code.

Affected (10)

Products: Sir: Gnuboard

1 product

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Sir Gnuboard	Version 3.30
Sir Gnuboard	Version 3.31
Sir Gnuboard	Version 3.32
Sir Gnuboard	Version 3.33
Sir Gnuboard	Version 3.34
Sir Gnuboard	Version 3.35
Sir Gnuboard	Version 3.36
Sir Gnuboard	Version 3.37
Sir Gnuboard	Version 3.38
Sir Gnuboard	Version 3.39

References (10)

http://marc.info/?l=bugtraq&m=110313585810712&w=2

Source: cve@mitre.org

http://secunia.com/advisories/13479/

Source: cve@mitre.org

Patch

http://sir.co.kr/?doc=bbs/gnuboard.php&bo_table=pds&page=1&wr_id=1871

Source: cve@mitre.org

http://www.securityfocus.com/bid/11948

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/18494

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=110313585810712&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/13479/

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://sir.co.kr/?doc=bbs/gnuboard.php&bo_table=pds&page=1&wr_id=1871

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/11948

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/18494

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.