← Database

CVE-2003-1253

HIGH CVSS: 7.5 Published: 2003-12-31 Modified: 2026-06-16

Description

PHP remote file inclusion vulnerability in Bookmark4U 1.8.3 allows remote attackers to execute arbitrary PHP code viaa URL in the prefix parameter to (1) dbase.php, (2) config.php, or (3) common.load.php.

Affected Platforms

Sangwan Kim Bookmark4U

Weakness Type

CWE-94

References