CVE-2003-1412: Gonicus System Administration

Medium severity, CVSS 6.8. EPSS: 2.7% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in index.php for GONiCUS System Administrator (GOsa) 1.0 allows remote attackers to execute arbitrary PHP code via the plugin parameter to (1) 3fax/1blocklists/index.php; (2) 6departamentadmin/index.php, (3) 5terminals/index.php, (4) 4mailinglists/index.php, (5) 3departaments/index.php, and (6) 2groupd/index.php in 2administration/; or (7) the base parameter to include/help.php.

Affected products

• Gonicus Gonicus System Administration: version 1.0 only

Published 2003-12-31. Last modified 2026-06-16.