CVE-2004-0285

Critical

Published: 23/11/2004(UTC)Translated: 30/05/2026(UTC)NVD NIST

Summary

All three applications: AllMyVisitors, AllMyLinks, and AllMyGuests have a PHP remote file inclusion vulnerability in include/footer.inc.php. An attacker can execute arbitrary PHP code by exploiting the _AMVconfig[cfg_serverpath] parameter.

Risk Assessment

This vulnerability allows remote attackers to execute arbitrary PHP code, potentially leading to server takeover and data leakage.

Recommendation

It is recommended to update to the latest version of the applications and implement appropriate security measures to block remote file inclusion.

Original NVD description (English source)

PHP remote file inclusion vulnerabilities in include/footer.inc.php in (1) AllMyVisitors, (2) AllMyLinks, and (3) AllMyGuests allow remote attackers to execute arbitrary PHP code via a URL in the _AMVconfig[cfg_serverpath] parameter.