Skip to main content
← All vulnerabilities
CVE-2002-2200

Benjamin Lefevre Dobermann FORUM 0.5 and earlier allows remote attackers to remotely include and execute malicious PHP files via the "subpat

Published
Last modified
published
Not listed in CISA KEV
4 on Exploit-DB

Summary

Benjamin Lefevre Dobermann FORUM 0.5 and earlier allows remote attackers to remotely include and execute malicious PHP files via the "subpath" variablein (1) entete.php, (2) enteteacceuil.php, (3) index.php, or (4) newtopic.php.

Timeline

  1. Public exploit on Exploit-DB

    EDB-21967, EDB-21968, EDB-21969, EDB-21970

  2. CVE published
  3. Record last updated

Affected versions

  • n/a n/a

    Version range not reported

References 7

seclists.org

securityfocus.com

iss.net

Exploit-DB