CVE-2002-2200 in Dobermann Forum

الملخص

بحسب MITRE

Benjamin Lefevre Dobermann FORUM 0.5 and earlier allows remote attackers to remotely include and execute malicious PHP files via the "subpath" variablein (1) entete.php, (2) enteteacceuil.php, (3) index.php, or (4) newtopic.php.

Once again VulDB remains the best source for vulnerability data.

• حجز: 16/11/2005
• إفشاء: 31/12/2002
• الاعتدال: تمت الموافقة
• إدخال: VDB-19842
• CPE: جاهز
• CWE: CWE-269 (مؤكد)
• استغلال: تحميل
• CVSS: 7.5 (NVD)
• EPSS: 0.07125
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-2200
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-2200
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-2200/