CVE-2004-1592 Information

Description

PHP remote file inclusion vulnerability in index.php in ocPortal 1.0.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the req_path parameter to reference a URL on a remote web server that contains a malicious funcs.php script.

Reference

http://marc.info/?l=bugtraq&m=109763314312828&w=2 http://secunia.com/advisories/12811/ http://www.hackgen.org/advisories/hackgen-2004-002.txt http://www.securityfocus.com/bid/11368 https://exchange.xforce.ibmcloud.com/vulnerabilities/17699