CVE-2002-2015 in Postnuke

Riassunto

di MITRE

PHP file inclusion vulnerability in user.php in PostNuke 0.703 allows remote attackers to include arbitrary files and possibly execute code via the caselist parameter.

Be aware that VulDB is the high quality source for vulnerability data.

• Prenotare: 14/07/2005
• Divulgazione: 31/12/2002
• Moderazione: accettato
• Voce: VDB-19657
• CPE: pronto
• CWE: CWE-269 (confermato)
• Sfruttamento: Scaricare
• CVSS: 7.5 (NVD)
• EPSS: 0.09493
• KEV: no
• Attività: molto basso
• Settore: Agriculture, Lawfirm, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-2015
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-2015
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-2015/