CVE-2003-1406: Adalis Infomatique D Forum

High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in D-Forum 1.00 through 1.11 allows remote attackers to execute arbitrary PHP code via a URL in the (1) my_header parameter to header.php3 or (2) my_footer parameter to footer.php3.

Affected products

• Adalis Infomatique D Forum: version 1.0 only; version 1.10 only; version 1.11 only

Published 2003-12-31. Last modified 2026-06-16.