CVE-2004-1592: PHP remote file inclusion vulnerability in index.php in ocPortal 1.0.3 and earlier allows remote attackers...

Security readout for executives and security teams

CVE-2004-1592 affects ocPortal 1.0.3 and earlier. A public site running this old software could be made to run attacker-supplied PHP code through a file-inclusion flaw. That can mean full application compromise, but the provided sources do not confirm current exploitation or a vendor fix. Exposure is likely limited to legacy internet-facing ocPortal installations at version 1.0.3 or earlier. Modern systems are unlikely affected unless old ocPortal code remains deployed, archived under a web root, or embedded in a custom PHP site. Prioritize remediation if any internet-facing ocPortal 1.0.3 or earlier instance exists. The business risk is potential server-side code execution on a public PHP application, balanced by the age and likely rarity of the software. Mitigation focus: Inventory public PHP sites for ocPortal 1.0.3 or earlier.; Remove public access to vulnerable legacy ocPortal deployments.; Check ocPortal vendor or maintainer guidance for fixed versions or migration direction..

Prepared

Jun 30, 2026, 00:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.