CVE-2002-2200

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 7.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2002-12-31 · updated 2026-06-16

Description

Benjamin Lefevre Dobermann FORUM 0.5 and earlier allows remote attackers to remotely include and execute malicious PHP files via the "subpath" variablein (1) entete.php, (2) enteteacceuil.php, (3) index.php, or (4) newtopic.php.

Affected products

Benjamin Lefevre Dobermann Forum: 0.1, 0.2, 0.3, 0.4, 0.5

References

http://seclists.org/lists/bugtraq/2002/Oct/0397.html
http://www.iss.net/security_center/static/10492.php
http://www.securityfocus.com/bid/6057
http://seclists.org/lists/bugtraq/2002/Oct/0397.html
http://www.iss.net/security_center/static/10492.php
http://www.securityfocus.com/bid/6057

Get alerted when CVE-2002-2200 or the next vulnerability affects your stack