CVE-2004-2195: Zanfi Solutions Zanfi CMS Lite

Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in index.php in Zanfi CMS lite 1.1 allows remote attackers to execute arbitrary PHP code via the inc parameter.

Affected products

• Zanfi Solutions Zanfi CMS Lite: version 1.1 only

Published 2004-12-31. Last modified 2026-06-16.