PT-2002-1962 · Php · Php Address

Published 2002-10-04 · Updated 2008-09-05 · CVE-2002-0953

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: PHP Address versions prior to 0.2f

Description: The issue allows remote attackers to execute arbitrary PHP code via a URL to the code in the LangCookie parameter when the PHP allow url fopen and register globals variables are enabled.

Recommendations: For versions prior to 0.2f, consider disabling the register globals variable and restricting the use of allow url fopen to minimize the risk of exploitation. Additionally, avoid using the LangCookie parameter in sensitive operations until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2002-0953

Affected Products

Php Address

References · 6

• 🔥 http://securityfocus.com/bid/5039 · Exploit
• 🔥 https://exploit-db.com/exploits/21564 · Exploit
• 🔥 http://iss.net/security_center/static/9379.php · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-0953 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2002-06/0182.html · Note
• http://online.securityfocus.com/archive/1/277987 · Note