7.5
CVSSv2

CVE-2002-2287

Published: 31/12/2002 Updated: 29/07/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

PHP remote file inclusion vulnerability in quick_reply.php for phpBB Advanced Quick Reply Hack 1.0.0 and 1.1.0 allows remote malicious users to execute arbitrary PHP code via the phpbb_root_path parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

phpbb advanced quick reply hack 1.0.0

phpbb advanced quick reply hack 1.1.0

Exploits

source: wwwsecurityfocuscom/bid/6173/info The phpBB Advanced Quick Reply Hack is prone to an issue which may allow attackers to include arbitrary files from a remote server It is possible for remote attackers to influence the include path for 'extensioninc' in the 'quick_replyphp' script As a result, an attacker may cause an arbitrar ...