CVE-2004-0068

CVE-2004-0068 describes a remote file inclusion vulnerability in PhpDig 1.6.5 and earlier, specifically within its config.php file. Attackers can exploit this by manipulating the $relative_script_path parameter to execute arbitrary PHP code from a remote web server. This vulnerability carries a CVSS score of 7.5, indicating high severity due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the CVE has garnered significant community discussion, suggesting awareness among security researchers.