CVE-2004-2195

Exploit

EPSS 0.83%
Published 31.12.2004 05:00:00
Last modified 03.04.2025 01:03:51
Source cve@mitre.org
Teams watchlist Login
Open Login

PHP remote file inclusion vulnerability in index.php in Zanfi CMS lite 1.1 allows remote attackers to execute arbitrary PHP code via the inc parameter.

Affected products Warnungen 0 Metrics 2 CWE 0 References 9

Data is provided by the National Vulnerability Database (NVD)

Zanfi Solutions ≫ Zanfi Cms Lite Version1.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.83%	0.723

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:P/A:N

http://secunia.com/advisories/12792

Vendor Advisory

http://securitytracker.com/id?1011612

http://www.osvdb.org/10676

http://www.securityfocus.com/archive/1/378053

Vendor Advisory

Exploit

http://www.securityfocus.com/bid/11362

Patch

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/17691

https://nvd.nist.gov/vuln/detail/CVE-2004-2195

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2004-2195

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2004-2195

EUVD