Vulnerabilities > CVE-2004-1934 - Remote File Include Command Injection vulnerability in Isesam Gemitel 3.50

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
isesam
exploit available
NVD
Published: 2004-04-15
Updated: 2017-07-11

Summary

PHP remote file inclusion vulnerability in affich.php in Gemitel 3.50 allows remote attackers to execute arbitrary PHP code via the base parameter.

Vulnerable Configurations

Part Description Count
Application
Isesam
1

Exploit-Db

descriptionGemitel 3.50 Affich.PHP Remote File Include Command Injection Vulnerability. CVE-2004-1934 . Webapps exploit for php platform
idEDB-ID:24009
last seen2016-02-02
modified2004-04-15
published2004-04-15
reporterjaguar
sourcehttps://www.exploit-db.com/download/24009/
titleGemitel 3.50 Affich.PHP Remote File Include Command Injection Vulnerability

References