Skip to content

CVE-2003-0753

nphpd.php in newsPHP 216 and earlier allows remote attackers to read arbitrary files via a full...

5.0 Medium

CVE-2003-0753 is a medium vulnerability (CVSS 5.0) in Newsphp, published September 6, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.04%, the 81st percentile. No source names a fixed version.

nphpd.php in newsPHP 216 and earlier allows remote attackers to read arbitrary files via a full pathname to the target file in the nphp_config[LangFile] parameter.

Exploit likelihood

2.04%Up 1.0 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

nphpd.php in newsPHP 216 and earlier allows remote attackers to read arbitrary files via a full pathname to the target file in the nphp_config[LangFile] parameter.

Record: CVE-2003-0753
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Updated: 2026-11-02

CVE List No score

nphpd.php in newsPHP 216 and earlier allows remote attackers to read arbitrary files via a full pathname to the target file in the nphp_config[LangFile] parameter.

Record: CVE-2003-0753
Updated: 2026-11-02

EUVDEUVD-2003-0744 No score

nphpd.php in newsPHP 216 and earlier allows remote attackers to read arbitrary files via a full pathname to the target file in the nphp_config[LangFile] parameter.

Record: EUVD-2003-0744
Updated: 2026-11-03

GitHub AdvisoriesGHSA-2h4c-xw3w-rpgx No score

nphpd.php in newsPHP 216 and earlier allows remote attackers to read arbitrary files via a full...

nphpd.php in newsPHP 216 and earlier allows remote attackers to read arbitrary files via a full pathname to the target file in the nphp_config[LangFile] parameter.

Record: GHSA-2h4c-xw3w-rpgx
Updated: 2026-11-02

Affected products

newsphp

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD

References