high7.5Public exploit code
CVE-2002-1135
modsecurity.php 1.10 and earlier, in phpWebSite 0.8.2 and earlier, allows remote attackers to execute arbitrary PHP source code via an inc_prefix parameter tha…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- phpWebSite 0.8.2 - PHP File Inclusion2002-09-23 · webapps · php · Verified
Impact
modsecurity.php 1.10 and earlier, in phpWebSite 0.8.2 and earlier, allows remote attackers to execute arbitrary PHP source code via an inc_prefix parameter that points to the malicious code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpwebsite | Phpwebsite | Version 0.8.2 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=103279980906880&w=2
- http://phpwebsite.appstate.edu/article.php?sid=400
- http://www.iss.net/security_center/static/10164.php
- http://www.osvdb.org/3848
- http://www.securityfocus.com/bid/5779
- http://marc.info/?l=bugtraq&m=103279980906880&w=2
- http://phpwebsite.appstate.edu/article.php?sid=400
- http://www.iss.net/security_center/static/10164.php
- http://www.osvdb.org/3848
- http://www.securityfocus.com/bid/5779