medium5.0Public exploit code
CVE-2002-1423
tmp_view.php in FUDforum before 2.2.0 allows remote attackers to read arbitrary files via an absolute pathname in the file parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Ilia Alshanetsky FUDForum 1.2.8/1.9.8/2.0.2 - File Disclosure2002-08-19 · webapps · php · Verified
Impact
tmp_view.php in FUDforum before 2.2.0 allows remote attackers to read arbitrary files via an absolute pathname in the file parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ilia Alshanetsky | Fudforum | Versions 1.2.8, 1.9.8, 2.0.2 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0082.html
- http://online.securityfocus.com/archive/1/288042
- http://www.iss.net/security_center/static/9896.php
- http://www.securityfocus.com/bid/5501
- http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0082.html
- http://online.securityfocus.com/archive/1/288042
- http://www.iss.net/security_center/static/9896.php
- http://www.securityfocus.com/bid/5501