CVE-2004-2601

Published: Dec 31, 2004Modified: Apr 16, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

PHP remote file inclusion vulnerability in UberTec Help Center Live (HCL) allows remote attackers to read local files and possibly execute PHP code via a URL in the SKIN_inner parameter to inc/skin.php.

Affected (1)

Products: Ubertec: Help Center Live

Ubertec

1 product

Help Center Live

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ubertec Help Center Live	Version 1.2.6

References (10)

http://secunia.com/advisories/13652

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1012685

Source: cve@mitre.org

http://www.gulftech.org/?node=research&article_id=00058-12242004

Source: cve@mitre.org

http://www.osvdb.org/12631

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/18695

Source: cve@mitre.org

http://secunia.com/advisories/13652