high7.5Public exploit code
CVE-2002-0206
index.php in Francisco Burzi PHP-Nuke 5.3.1 and earlier, and possibly other versions before 5.5, allows remote attackers to execute arbitrary PHP code by speci…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PHP-Nuke 4.x/5.x - Arbitrary File Inclusion2002-01-16 · webapps · php · Verified
Impact
index.php in Francisco Burzi PHP-Nuke 5.3.1 and earlier, and possibly other versions before 5.5, allows remote attackers to execute arbitrary PHP code by specifying a URL to the malicious code in the file parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Francisco Burzi | Php-Nuke | Versions 1.0, 2.5, 3.0, 4.0, 4.3, 4.4 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=101121913914205&w=2
- http://www.kb.cert.org/vuls/id/221683
- http://www.securityfocus.com/bid/3889
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7914
- http://marc.info/?l=bugtraq&m=101121913914205&w=2
- http://www.kb.cert.org/vuls/id/221683
- http://www.securityfocus.com/bid/3889
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7914