Vulnerability record · CVE-2003-1148 · published 25 October 2003
CVE-2003-1148: Les visiteurs vulnerability
Les Visiteurs · Les Visiteurs
Multiple PHP remote file inclusion vulnerabilities in J-Pierre DEZELUS Les Visiteurs 2.0.1, as used in phpMyConferences (phpMyConference) 8.0.2 and possibly other products, allow remote attackers to execute arbitrary PHP code via a URL in the lvc_include_dir parameter to (1) config.inc.php or (2) new-visitor.inc.php in common/visiteurs/include/.
Description
Multiple PHP remote file inclusion vulnerabilities in J-Pierre DEZELUS Les Visiteurs 2.0.1, as used in phpMyConferences (phpMyConference) 8.0.2 and possibly other products, allow remote attackers to execute arbitrary PHP code via a URL in the lvc_include_dir parameter to (1) config.inc.php or (2) new-visitor.inc.php in common/visiteurs/include/.
AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected products
1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.
References
| Link | Tags |
|---|---|
| http://archives.neohapsis.com/archives/bugtraq/2003-10/0262.html | ExploitPatch |
| http://secunia.com/advisories/10079 | Vendor Advisory |
| http://securitytracker.com/id?1008011 | ExploitPatch |
| http://securitytracker.com/id?1017065 | |
| http://www.osvdb.org/2717 | Vendor Advisory |
| http://www.osvdb.org/3586 | ExploitPatchVendor Advisory |
| http://www.securityfocus.com/bid/8902 | ExploitVendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/13529 | |
| http://archives.neohapsis.com/archives/bugtraq/2003-10/0262.html | ExploitPatch |
| http://secunia.com/advisories/10079 | Vendor Advisory |
| http://securitytracker.com/id?1008011 | ExploitPatch |
| http://securitytracker.com/id?1017065 | |
| http://www.osvdb.org/2717 | Vendor Advisory |
| http://www.osvdb.org/3586 | ExploitPatchVendor Advisory |
| http://www.securityfocus.com/bid/8902 | ExploitVendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/13529 |
Track CVE-2003-1148 inside VULONE
Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.
Source: NIST National Vulnerability Database (record CVE-2003-1148), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.
