$ cve CVE-2004-1315 JSON

CVE-2004-1315 EXPLOIT

7.5

HIGH · CVSS 2.0 · EPSS 72.1% (pctl 99)

Patch early

A public exploit exists.

Description

viewtopic.php in phpBB 2.x before 2.0.11 improperly URL decodes the highlight parameter when extracting words and phrases to highlight, which allows remote attackers to execute arbitrary PHP code by double-encoding the highlight value so that special characters are inserted into the result, which is then processed by PHP exec, as exploited by the Santy.A worm.

Scoring

CVSS	7.5 (HIGH, v2.0)
Vector	AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS	72.1% — more likely to be exploited than 99% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2004-11-12
Last modified	2026-06-16

Affected (1)

Vendor	Product
phpbb group	phpbb

Public exploits

Source	Title	Date
exploit-db	phpBB - 'viewtopic.php' Arbitrary Code Execution (Metasploit)	2010-07-03
exploit-db	PHP-Nuke 7.0/8.1/8.1.35 - Wormable Remote Code Execution	2010-05-05
exploit-db	phpBB 2.0.10 - Remote Command Execution	2004-11-22
exploit-db	phpBB 2.0.x - 'viewtopic.php' PHP Script Injection	2004-07-12

References

→ the Explorer · watch your stack · NVD