Published: 31/12/2002 Updated: 10/09/2008

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 770

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Benjamin Lefevre Dobermann FORUM 0.5 and previous versions allows remote malicious users to remotely include and execute malicious PHP files via the "subpath" variablein (1) entete.php, (2) enteteacceuil.php, (3) index.php, or (4) newtopic.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
benjamin lefevre dobermann forum 0.2
benjamin lefevre dobermann forum 0.4
benjamin lefevre dobermann forum 0.1
benjamin lefevre dobermann forum 0.3
benjamin lefevre dobermann forum 0.5

source: wwwsecurityfocuscom/bid/6057/info Dobermann Forum is prone to an issue which may allow remote attackers to include arbitrary files located on remote servers This issue is present in several PHP script files provided with Dobermann An attacker may exploit this by supplying a path to a file on a remote host as a value for the 'su ...

source: wwwsecurityfocuscom/bid/6057/info Dobermann Forum is prone to an issue which may allow remote attackers to include arbitrary files located on remote servers This issue is present in several PHP script files provided with Dobermann An attacker may exploit this by supplying a path to a file on a remote host as a value for the 'sub ...

source: wwwsecurityfocuscom/bid/6057/info Dobermann Forum is prone to an issue which may allow remote attackers to include arbitrary files located on remote servers This issue is present in several PHP script files provided with Dobermann An attacker may exploit this by supplying a path to a file on a remote host as a value for the 's ...

source: wwwsecurityfocuscom/bid/6057/info Dobermann Forum is prone to an issue which may allow remote attackers to include arbitrary files located on remote servers This issue is present in several PHP script files provided with Dobermann An attacker may exploit this by supplying a path to a file on a remote host as a value for the ' ...

NVD-CWE-Other http://www.securityfocus.com/bid/6057 http://www.iss.net/security_center/static/10492.php http://seclists.org/lists/bugtraq/2002/Oct/0397.html https://nvd.nist.gov https://www.exploit-db.com/exploits/21968/

CVE-2002-2200

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect