high7.5Public exploit code
CVE-2002-2200
Benjamin Lefevre Dobermann FORUM 0.5 and earlier allows remote attackers to remotely include and execute malicious PHP files via the "subpath" variablein (1) e…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Benjamin Lefevre Dobermann Forum 0.x - 'newtopic.php?subpath' Remote File Inclusion2002-10-28 · webapps · php · Verified
- Benjamin Lefevre Dobermann Forum 0.x - 'index.php?subpath' Remote File Inclusion2002-10-28 · webapps · php · Verified
- Benjamin Lefevre Dobermann Forum 0.x - 'enteteacceuil.php?subpath' Remote File Inclusion2002-10-28 · webapps · php · Verified
- Benjamin Lefevre Dobermann Forum 0.x - 'entete.php?subpath' Remote File Inclusion2002-10-28 · webapps · php · Verified
Impact
Benjamin Lefevre Dobermann FORUM 0.5 and earlier allows remote attackers to remotely include and execute malicious PHP files via the "subpath" variablein (1) entete.php, (2) enteteacceuil.php, (3) index.php, or (4) newtopic.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Benjamin Lefevre | Dobermann Forum | Versions 0.1, 0.2, 0.3, 0.4, 0.5 |
References
- NVD record
- CVE.org record
- http://seclists.org/lists/bugtraq/2002/Oct/0397.html
- http://www.iss.net/security_center/static/10492.php
- http://www.securityfocus.com/bid/6057
- http://seclists.org/lists/bugtraq/2002/Oct/0397.html
- http://www.iss.net/security_center/static/10492.php
- http://www.securityfocus.com/bid/6057