PT-2002-1277 · Php · Php-Nuke

Publicado 2002-05-03 · Atualizado 2017-07-11 · CVE-2002-0206

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PHP-Nuke versions 5.3.1 and earlier

Description The issue allows remote attackers to execute arbitrary PHP code. This is achieved by specifying a URL to the malicious code in the file parameter of the index.php.

Recommendations For PHP-Nuke versions 5.3.1 and earlier, consider updating to a version later than 5.3.1 to resolve the issue. As a temporary workaround, restrict access to the index.php file to minimize the risk of exploitation. Avoid using the file parameter in the index.php until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2002-0206

Produtos afetados

Php-Nuke

Referências · 7

• 🔥 https://exploit-db.com/exploits/21230 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-0206 · Nota de Segurança
• http://kb.cert.org/vuls/id/221683 · Nota
• http://securityfocus.com/bid/3889 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7914 · Nota
• http://marc.info/?l=bugtraq&m=101121913914205&w=2 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0206 · Nota