CVE-2002-0473

Опубликовано: 12 авг. 2002

Источник: nvd

CVSS2: 10

EPSS Средний

Описание

db.php in phpBB 2.0 (aka phpBB2) RC-3 and earlier allows remote attackers to execute arbitrary code from remote servers via the phpbb_root_path parameter.

Ссылки

http://archives.neohapsis.com/archives/bugtraq/2002-03/0221.html
http://archives.neohapsis.com/archives/bugtraq/2002-03/0229.html
http://online.securityfocus.com/archive/82/262600
Vendor Advisory
http://phpbb.sourceforge.net/phpBB2/viewtopic.php?t=9483
http://prdownloads.sourceforge.net/phpbb/phpBB-2.0.1.zip
http://www.iss.net/security_center/static/8476.php
Vendor Advisory
http://www.osvdb.org/4268
http://www.securityfocus.com/bid/4380
Patch
Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2002-03/0221.html
http://archives.neohapsis.com/archives/bugtraq/2002-03/0229.html
http://online.securityfocus.com/archive/82/262600
Vendor Advisory
http://phpbb.sourceforge.net/phpBB2/viewtopic.php?t=9483
http://prdownloads.sourceforge.net/phpbb/phpBB-2.0.1.zip
http://www.iss.net/security_center/static/8476.php
Vendor Advisory
http://www.osvdb.org/4268
http://www.securityfocus.com/bid/4380
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:phpbb_group:phpbb:2.0_beta1:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0_rc1:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0_rc2:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0_rc3:*:*:*:*:*:*:*

EPSS

Процентиль: 94%

0.14537

Средний

10 Critical

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-8xxh-294r-qp2g

github

почти 4 года назад