CVE-2003-1253: Sangwan Kim BOOKMARK4U

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in Bookmark4U 1.8.3 allows remote attackers to execute arbitrary PHP code viaa URL in the prefix parameter to (1) dbase.php, (2) config.php, or (3) common.load.php.

Affected products

• Sangwan Kim BOOKMARK4U: version 1.8.3 only

Published 2003-12-31. Last modified 2026-06-16.