Unrated severityNVD Advisory· Published Dec 31, 2004· Updated Apr 16, 2026
CVE-2004-1403
CVE-2004-1403
Description
PHP remote file inclusion vulnerability in index.php in GNUBoard 3.39 and earlier allows remote attackers to execute arbitrary PHP code by modifying the doc parameter to reference a URL on a remote web server that contains the code.
Affected products
10cpe:2.3:a:sir:gnuboard:3.38:*:*:*:*:*:*:*+ 9 more
- cpe:2.3:a:sir:gnuboard:3.38:*:*:*:*:*:*:*
- cpe:2.3:a:sir:gnuboard:3.39:*:*:*:*:*:*:*
- cpe:2.3:a:sir:gnuboard:3.30:*:*:*:*:*:*:*
- cpe:2.3:a:sir:gnuboard:3.31:*:*:*:*:*:*:*
- cpe:2.3:a:sir:gnuboard:3.32:*:*:*:*:*:*:*
- cpe:2.3:a:sir:gnuboard:3.33:*:*:*:*:*:*:*
- cpe:2.3:a:sir:gnuboard:3.34:*:*:*:*:*:*:*
- cpe:2.3:a:sir:gnuboard:3.35:*:*:*:*:*:*:*
- cpe:2.3:a:sir:gnuboard:3.36:*:*:*:*:*:*:*
- cpe:2.3:a:sir:gnuboard:3.37:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5News mentions
0No linked articles in our index yet.