CVE-2004-0246: Multiple PHP remote file inclusion vulnerabilities in (1) fonctions.lib.php, (2) derniers_commentaires.php,...

Security readout for executives and security teams

CVE-2004-0246 is a legacy PHP remote file inclusion issue in Les Commentaires 2.0. If exposed, an attacker could make the application load attacker-controlled PHP and run code on the server. The bundle does not identify a patch, current vendor guidance, or active exploitation. Exposure is likely limited to organizations still running Les Commentaires 2.0 or copied code containing the named PHP files. Internet-facing legacy PHP deployments are the main concern. The supplied affected-product metadata is incomplete and lists vendor/product as n/a. Prioritize quickly if any legacy Les Commentaires 2.0 instance is internet-facing. For most modern environments, urgency depends on whether this old PHP application or reused vulnerable code is still present. Mitigation focus: Identify and remove any public Les Commentaires 2.0 deployments.; Check vendor or archived project guidance for an official fix or replacement.; Restrict direct internet access to the named PHP scripts if removal is delayed..

Prepared

Jun 30, 2026, 06:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.