Vulnerability Description
Benjamin Lefevre Dobermann FORUM 0.5 and earlier allows remote attackers to remotely include and execute malicious PHP files via the "subpath" variablein (1) entete.php, (2) enteteacceuil.php, (3) index.php, or (4) newtopic.php.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Benjamin Lefevre | Dobermann Forum | 0.1 |
References
- http://seclists.org/lists/bugtraq/2002/Oct/0397.html
- http://www.iss.net/security_center/static/10492.php
- http://www.securityfocus.com/bid/6057
- http://seclists.org/lists/bugtraq/2002/Oct/0397.html
- http://www.iss.net/security_center/static/10492.php
- http://www.securityfocus.com/bid/6057
FAQ
What is CVE-2002-2200?
CVE-2002-2200 is a vulnerability with a CVSS score of 7.5 (HIGH). Benjamin Lefevre Dobermann FORUM 0.5 and earlier allows remote attackers to remotely include and execute malicious PHP files via the "subpath" variablein (1) entete.php, (2) enteteacceuil.php, (3) ind...
How severe is CVE-2002-2200?
CVE-2002-2200 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2002-2200?
Check the references section above for vendor advisories and patch information. Affected products include: Benjamin Lefevre Dobermann Forum.