high7.5Public exploit code
CVE-2002-0953
globals.php in PHP Address before 0.2f, with the PHP allow_url_fopen and register_globals variables enabled, allows remote attackers to execute arbitrary PHP c…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PHP-Address 0.2 e - Remote File Inclusion2002-06-17 · webapps · php · Verified
Impact
globals.php in PHP Address before 0.2f, with the PHP allow_url_fopen and register_globals variables enabled, allows remote attackers to execute arbitrary PHP code via a URL to the code in the LangCookie parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Php Address | Php Address | Version 0.2e |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2002-06/0182.html
- http://online.securityfocus.com/archive/1/277987
- http://www.iss.net/security_center/static/9379.php
- http://www.securityfocus.com/bid/5039
- http://archives.neohapsis.com/archives/bugtraq/2002-06/0182.html
- http://online.securityfocus.com/archive/1/277987
- http://www.iss.net/security_center/static/9379.php
- http://www.securityfocus.com/bid/5039