PHP remote file inclusion vulnerability in index.php for GONiCUS System...
Vulnerability Description
PHP remote file inclusion vulnerability in index.php for GONiCUS System Administrator (GOsa) 1.0 allows remote attackers to execute arbitrary PHP code via the plugin parameter to (1) 3fax/1blocklists/index.php; (2) 6departamentadmin/index.php, (3) 5terminals/index.php, (4) 4mailinglists/index.php, (5) 3departaments/index.php, and (6) 2groupd/index.php in 2administration/; or (7) the base parameter to include/help.php.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2003-1412
Credits & Attribution
No credits recorded in the NVD database.
References
- http://secunia.com/advisories/8120
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11408
- http://www.securityfocus.com/archive/1/313282/30/25760/threaded
- http://lists.grok.org.uk/pipermail/full-disclosure/2003-February/003932.html
- http://www.securityfocus.com/bid/6922
- http://www.securitytracker.com/id?1006162
Affected Vendor
gonicus
View all reports →Affected Software
Timeline
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.