Unrated severityNVD Advisory· Published Dec 31, 2003· Updated Apr 16, 2026

CVE-2003-1459

Description

Multiple PHP remote file inclusion vulnerabilities in ttCMS 2.2 and ttForum allow remote attackers to execute arbitrary PHP code via the (1) template parameter in News.php or (2) installdir parameter in install.php.

Affected products

Ttcms/Ttcms
cpe:2.3:a:ttcms:ttcms:2.2:*:*:*:*:*:*:*
Ttcms/Ttforum
cpe:2.3:a:ttcms:ttforum:1.1:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.securityfocus.com/bid/7542nvdExploit
securityreason.com/securityalert/3278nvd
www.securityfocus.com/archive/1/321000nvd
exchange.xforce.ibmcloud.com/vulnerabilities/12271nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000