Vulnerability Details CVE-2002-2015
PHP file inclusion vulnerability in user.php in PostNuke 0.703 allows remote attackers to include arbitrary files and possibly execute code via the caselist parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.095
EPSS Ranking 94.8%
CVSS Severity
CVSS v2 Score 7.5
References
- http://archives.neohapsis.com/archives/bugtraq/2002-03/0345.html
- http://www.iss.net/security_center/static/8699.php
- http://www.securityfocus.com/bid/4381
- http://archives.neohapsis.com/archives/bugtraq/2002-03/0345.html
- http://www.iss.net/security_center/static/8699.php
- http://www.securityfocus.com/bid/4381
Products affected by CVE-2002-2015
-
cpe:2.3:a:postnuke_software_foundation:postnuke:0.703