VULNERABILITY INTELLIGENCE
CVE-2003-1459
CVSS score6.8 MEDIUM
EPSS probability7.07%
CISA KEVNot currently listed
Published2003-12-31
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P
Description
Multiple PHP remote file inclusion vulnerabilities in ttCMS 2.2 and ttForum allow remote attackers to execute arbitrary PHP code via the (1) template parameter in News.php or (2) installdir parameter in install.php.
Weakness classification
- CWE-94: Improper Control of Generation of Code ('Code Injection')