CVE-2003-1251: High severity Nx N X Web Content Management System 2002 vulnerability

Published Dec 31, 2003

Updated

The (1) menu.inc.php, (2) datasets.php and (3) massoperations.inc.php (mistakenly referred to as massopeations.inc.php) scripts in N/X 2002 allow remote attackers to execute arbitrary PHP code via a cpath that references a URL on a remote web server that contains the code.

Affected Software

1 affected component

Nx N X Web Content Management System 2002=prerelease1

Remediation

Patch Available

http://archives.neohapsis.com/archives/bugtraq/2003-01/0005.html

Event History

Dec 31, 2003

CVE Published

05:00 AM

Data Sourced

via NVD·05:00 AM

RemedyDescriptionSeverityAffected Software

Nov 16, 2005

CVE Published

via MITRE·12:37 PM

Data Sourced

via MITRE·12:37 PM

Description

Frequently Asked Questions

What is the severity of CVE-2003-1251?

CVE-2003-1251 has a high severity rating due to its potential for remote code execution.

How can I fix CVE-2003-1251?

To fix CVE-2003-1251, update to a patched version of the N/X web content management system that addresses this vulnerability.

What impact does CVE-2003-1251 have on my system?

CVE-2003-1251 allows remote attackers to execute arbitrary PHP code, compromising the integrity and security of the affected system.

What versions of N/X are affected by CVE-2003-1251?

CVE-2003-1251 specifically affects the N/X 2002 web content management system, particularly the prerelease1 version.

How does CVE-2003-1251 exploit occur?

CVE-2003-1251 exploits a vulnerability through a manipulated c_path variable that references remote URLs containing malicious PHP code.