CVE-2003-1252

register.php in S8Forum 3.0 allows remote attackers to execute arbitrary PHP commands by creating a user whose name ends in a .php extension and entering the desired commands into the E-mail field, which creates a web-accessible .php file that can be called by the attacker, as demonstrated using a "system($cmd)" E-mail address with a "any_name.php" username.

• http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0004.htmlExploit, Vendor Advisory
• http://secunia.com/advisories/7819
• http://www.iss.net/security_center/static/10974.php
• http://www.securityfocus.com/archive/1/305406Exploit, Vendor Advisory
• http://www.securityfocus.com/bid/6547Exploit
• http://www.securitytracker.com/id?1005881
• http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0004.htmlExploit, Vendor Advisory
• http://secunia.com/advisories/7819
• http://www.iss.net/security_center/static/10974.php
• http://www.securityfocus.com/archive/1/305406Exploit, Vendor Advisory
• http://www.securityfocus.com/bid/6547Exploit
• http://www.securitytracker.com/id?1005881

Published

Dec 31, 2003

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2003-1246NtCreateSymbolicLinkObject in ntdll.dll in Integrity Protect…
• CVE-2003-1247Multiple buffer overflows in H-Sphere WebShell 2.3 allow rem…
• CVE-2003-1248H-Sphere WebShell 2.3 allows remote attackers to execute arb…
• CVE-2003-1249WebIntelligence 2.7.1 uses guessable user session cookies, w…
• CVE-2003-1250Efficient Networks 5861 DSL router, when running firmware 5.…
• CVE-2003-1251The (1) menu.inc.php, (2) datasets.php and (3) mass_operatio…
• CVE-2003-1253PHP remote file inclusion vulnerability in Bookmark4U 1.8.3 …
• CVE-2003-1254Active PHP Bookmarks (APB) 1.1.01 allows remote attackers to…
• CVE-2003-1255add_bookmark.php in Active PHP Bookmarks (APB) 1.1.01 allows…
• CVE-2003-1256aff_liste_langue.php in E-theni allows remote attackers to e…
• CVE-2003-1257find_theni_home.php in E-theni allows remote attackers to ob…
• CVE-2003-1258activate.php in versatileBulletinBoard (vBB) 0.9.5 and 0.9.6…