high7.5Public exploit code
CVE-2002-2015
PHP file inclusion vulnerability in user.php in PostNuke 0.703 allows remote attackers to include arbitrary files and possibly execute code via the caselist pa…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PostNuke 0.703 - caselist Arbitrary Module Include2002-03-28 · webapps · php · Verified
Impact
PHP file inclusion vulnerability in user.php in PostNuke 0.703 allows remote attackers to include arbitrary files and possibly execute code via the caselist parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Postnuke Software Foundation | Postnuke | Version 0.703 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2002-03/0345.html
- http://www.iss.net/security_center/static/8699.php
- http://www.securityfocus.com/bid/4381
- http://archives.neohapsis.com/archives/bugtraq/2002-03/0345.html
- http://www.iss.net/security_center/static/8699.php
- http://www.securityfocus.com/bid/4381