CVE-2004-0285: PHP remote file inclusion vulnerabilities in include/footer.inc.php in (1) AllMyVisitors, (2) AllMyLinks, a...

Security readout for executives and security teams

CVE-2004-0285 affects AllMyVisitors, AllMyLinks, and AllMyGuests. A vulnerable PHP include file can be made to load attacker-controlled PHP from a supplied URL, potentially letting an attacker run code on the web server. The bundle does not provide CVSS, versions, vendor fix, or evidence of active exploitation. Likely exposure is legacy internet-facing PHP sites still running AllMyVisitors, AllMyLinks, or AllMyGuests. Exposure is most relevant where include/footer.inc.php is present and remote URL includes are possible. The source bundle does not establish modern prevalence. Prioritize if these old PHP applications are still publicly reachable. The business risk is server-side code execution, but urgency depends on confirmed deployment because the sources do not show active exploitation, patch status, or current product prevalence. Mitigation focus: Inventory for AllMyVisitors, AllMyLinks, and AllMyGuests installations or copied code.; Check vendor or maintainer guidance for fixed versions or official mitigations.; Remove unsupported or unused legacy PHP applications from public web servers..

Prepared

Jun 30, 2026, 06:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.