CVE-2003-1251
The (1) menu.inc.php, (2) datasets.php and (3) mass_operations.inc.php (mistakenly referred to as mass_opeations.inc.php) scripts in N/X 2002 allow remote...
- Published
- Nov 16, 2005
- Updated
- Aug 8, 2024
- Assigning CNA
- mitre
- Evidence observed
- Jan 2, 2003
Primary CVSS
nvd · CVSS 2.0
AV:N/AC:L/Au:N/C:P/I:P/A:PLow · next 30 days
- Percentile
- 94.4%
- Model date
- Oct 13, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
Summary
The (1) menu.inc.php, (2) datasets.php and (3) mass_operations.inc.php (mistakenly referred to as mass_opeations.inc.php) scripts in N/X 2002 allow remote attackers to execute arbitrary PHP code via a c_path that references a URL on a remote web server that contains the code.
Sources
- N/X Web Content Management System 2002 Prerelease 1 - 'menu.inc.php?c_path' Remote File InclusionExploit
frog · php · Jan 2, 2003
- N/X Web Content Management System 2002 Prerelease 1 - 'datasets.php?c_path' Local File InclusionExploit
frog · php · Jan 2, 2003
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.