CVE-2004-2041: High severity e107 e107 vulnerability
Published May 29, 2004
·Updated
PHP remote file inclusion vulnerability in secureimgrender.php in e107 0.615 allows remote attackers to execute arbitrary PHP code by modifying the p parameter to reference a URL on a remote web server that contains the code.
Affected Software
4 affected components
e107 e107=0.6_15
e107 e107=0.6_15a
e107 e107=0.6_15
e107 e107=0.6_15a
Event History
May 29, 2004
CVE Published
04:00 AM
May 10, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-2041?
CVE-2004-2041 is considered a high-severity vulnerability due to its potential to allow remote code execution.
2
How do I fix CVE-2004-2041?
To fix CVE-2004-2041, upgrade to the latest version of e107 CMS that does not include this vulnerability.
3
Who is affected by CVE-2004-2041?
CVE-2004-2041 affects users of e107 CMS version 0.6_15 and 0.6_15a.
4
What type of vulnerability is CVE-2004-2041?
CVE-2004-2041 is a remote file inclusion vulnerability.
5
Can CVE-2004-2041 be exploited without authentication?
Yes, CVE-2004-2041 can be exploited without authentication, making it particularly dangerous.