Skip to main content
← All vulnerabilities
CVE-2002-1878

PHP remote file inclusion vulnerability in w-Agora 4.1.3 allows remote attackers to execute arbitrary PHP code via the inc_dir parameter.

Published
Last modified
published
Not listed in CISA KEV
1 on Exploit-DB

Summary

PHP remote file inclusion vulnerability in w-Agora 4.1.3 allows remote attackers to execute arbitrary PHP code via the inc_dir parameter.

Timeline

  1. Public exploit on Exploit-DB

    EDB-21529

  2. CVE published
  3. Record last updated

Affected versions

  • n/a n/a

    Version range not reported

References 6

w-agora.net

securityfocus.com

iss.net

archives.neohapsis.com

ifrance.com

Exploit-DB