CVE-2004-2601: Ubertec Help Center Live

Medium severity, CVSS 6.4. EPSS: 1.5% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in UberTec Help Center Live (HCL) allows remote attackers to read local files and possibly execute PHP code via a URL in the SKIN_inner parameter to inc/skin.php.

Affected products

• Ubertec Help Center Live: version 1.2.6 only

Published 2004-12-31. Last modified 2026-06-16.