vulnwire
7.5high

CVE-2002-22004 exploits

Benjamin Lefevre Dobermann FORUM 0.5 and earlier allows remote attackers to remotely include and execute malicious PHP files via the "subpa…

Published 23 y ago · modified 4 mo ago · JSON

CVSS
7.5
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
7.1%
percentile 94%
Public exploits
4
Exploit-DB

Benjamin Lefevre Dobermann FORUM 0.5 and earlier allows remote attackers to remotely include and execute malicious PHP files via the "subpath" variablein (1) entete.php, (2) enteteacceuil.php, (3) index.php, or (4) newtopic.php.

Exploit prediction (EPSS)

7.12% probability of exploitation in the next 30 days, higher than 94% of all scored CVEs.

Exploits and detections

  • EDB-21970 Benjamin Lefevre Dobermann Forum 0.x - 'newtopic.php?subpath' Remote File Inclusion · webapps · 2002-10-28
  • EDB-21969 Benjamin Lefevre Dobermann Forum 0.x - 'index.php?subpath' Remote File Inclusion · webapps · 2002-10-28
  • EDB-21968 Benjamin Lefevre Dobermann Forum 0.x - 'enteteacceuil.php?subpath' Remote File Inclusion · webapps · 2002-10-28
  • EDB-21967 Benjamin Lefevre Dobermann Forum 0.x - 'entete.php?subpath' Remote File Inclusion · webapps · 2002-10-28

CVSS scores

Assigned byVersionScoreVector
NVD2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

References

  • seclists.org /lists/bugtraq/2002/Oct/0397.html · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • securityfocus.com /bid/6057 · vdb-entry, x_refsource_BID, x_transferred
  • iss.net /security_center/static/10492.php · vdb-entry, x_refsource_XF, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.