CVE-2004-0070: PHP remote file inclusion vulnerability in module.php for ezContents allows remote attackers to execute arb...

Security readout for executives and security teams

CVE-2004-0070 is a legacy ezContents issue where a web request could make the application load PHP code from a remote server. If an exposed installation is vulnerable, the business impact could be server compromise. The sources do not provide affected versions, CVSS, or a confirmed fix. Exposure is most likely limited to old, internet-reachable ezContents deployments with module.php accessible. The source bundle lists affected vendor, product, and versions as n/a, so asset confirmation is required before prioritizing remediation. Treat confirmed exposure as urgent because successful exploitation could execute attacker-controlled PHP on the web server. If ezContents is not present, no action is needed beyond documenting the negative finding. Mitigation focus: Inventory public websites for ezContents and module.php exposure.; Check ezContents vendor guidance and archived advisories for the fixed release.; Remove or replace unsupported ezContents installations where feasible..

Prepared

Jun 30, 2026, 03:02 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.