CVE-2003-1402: Kietu

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in hit.php for Kietu 2.0 and 2.3 allows remote attackers to execute arbitrary PHP code via the url_hit parameter, a different vulnerability than CVE-2006-5015.

Affected products

• Kietu Kietu: version 2.0 only; version 2.3 only

Published 2003-12-31. Last modified 2026-06-16.