CVE-2003-1599

Summary

PHP remote file inclusion vulnerability in wp-links/links.all.php in WordPress 0.70 allows remote attackers to execute arbitrary PHP code via a URL in the $abspath variable.

Impact & exploitability

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products we track (1)

Recommendation

Apply the vendor fix promptly. Open any affected product above for its exact safe version.

Additional information

• NVD record
• http://www.kernelpanik.org/docs/kernelpanik/wordpressadv.txt
• http://www.osvdb.org/4611
• http://www.securityfocus.com/bid/7785
• https://exchange.xforce.ibmcloud.com/vulnerabilities/12205
• http://www.openwall.com/lists/oss-security/2012/01/06/3Exploit