CVE-2004-1403: PHP remote file inclusion vulnerability in index.php in GNUBoard 3.39 and earlier allows remote attackers t...

Security readout for executives and security teams

CVE-2004-1403 affects very old GNUBoard releases, reported as 3.39 and earlier. A remote attacker could make the application load PHP code from an external server through the doc parameter, which can lead to server-side code execution. Exposure is most likely where legacy GNUBoard 3.39 or earlier is still publicly reachable. The bundle does not provide CPEs or a complete affected-product matrix, so asset confirmation is required. Treat confirmed exposure as urgent because the described impact is remote arbitrary PHP code execution on a web server. If no GNUBoard 3.39-or-earlier systems exist, priority drops to documentation and monitoring. Mitigation focus: Inventory internet-facing GNUBoard instances and identify versions.; Check GNUBoard or maintainer guidance for a fixed upgrade or replacement path.; Remove or restrict public access to affected legacy instances until remediated..

Prepared

Jun 30, 2026, 00:54 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.