CVE-2003-1292

MITTEL 5.0CVE-2003-1292 · Published 31/12/2003 · updated 16/06/2026

Kurz gesagt

CVE-2003-1292 ist eine Schwachstelle (MITTEL (CVSS 5.0)) in ashnews (ashwebstudio).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 3.4%, höher als bei 88.9% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
ashnews ashwebstudio	`= 0.83`	No fix yet

Description

PHP remote file include vulnerability in Derek Ashauer ashNews 0.83 allows remote attackers to include and execute arbitrary remote files via a URL in the pathtoashnews parameter to (1) ashnews.php and (2) ashheadlines.php.

References

archives.neohapsis.com/archives/fulldisclosure/2006-01/0969.html
archives.neohapsis.com/archives/fulldisclosure/2006-01/0979.html · Exploit
archives.neohapsis.com/archives/fulldisclosure/2006-01/0980.html
forums.ashwebstudio.com/viewtopic.php
secunia.com/advisories/9331
securityfocus.com/archive/1/329910 · Exploit
securityfocus.com/bid/16436 · Exploit
securityfocus.com/bid/18248
exploit-db.com/exploits/1864

Weitere Schwachstellen in ashnews

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free