CVE-2003-0320

header.php in ttCMS 2.3 and earlier allows remote attackers to inject arbitrary PHP code by setting the ttcms_user_admin parameter to "1" and modifying the…

published May 22, 2003

CVSS
—
EPSS
5%
Percentile
92.6
In the wild
Unconfirmed
What it is

header.php in ttCMS 2.3 and earlier allows remote attackers to inject arbitrary PHP code by setting the ttcms_user_admin parameter to "1" and modifying the admin_root parameter to point to a URL that contains a Trojan horse header.inc.php script.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05332 · 92.6th percentile
Published
2003-05-22T04:00Z
EPSS history
Timeline
  • 22 MAY 04:00Z
    header.php in ttCMS 2.3 and earlier allows remote attackers to inject arbitrary PHP code by setting the ttcms_user_admin parameter to "1" and modifying the…
    cvelistv5