CVE-2003-0491

CVE-2003-0491 describes a critical arbitrary code execution vulnerability affecting the Tutorials 2.0 module in XOOPS and E-XOOPS. Attackers can exploit this by uploading a malicious PHP file, bypassing MIME type checks, and then directly executing it on the server. With a CVSS score of 7.5, this vulnerability is easily exploitable over the network with no authentication, leading to potential compromise of confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.