Description

PHP remote file inclusion vulnerability in wp-links/links.all.php in WordPress 0.70 allows remote attackers to execute arbitrary PHP code via a URL in the $abspath variable.

Remediation

References

CVE-2003-1599

Related Vulnerabilities

Apache HTTP Server Other Vulnerability (CVE-2003-0245)

WordPress Plugin Radio Buttons for Taxonomies Cross-Site Request Forgery (2.0.5)

WordPress Plugin Simple Popup Newsletter Cross-Site Scripting (1.4.7)

WordPress Plugin Events Manager Multiple Vulnerabilities (5.9.7.3)

Drupal Core 8.x.x Remote Code Execution (8.0.0 - 8.4.8)

Severity

High

Classification

CVE-2003-1599 CWE-94

Tags

Missing Update Known Vulnerabilities