Remote File Inclusion Vulnerability in Dobermann FORUM by Benjamin Lefevre
CVE-2002-2200

Currently unrated

Key Information:

Vendor: Benjamin Lefevre
Status: Dobermann Forum
Vendor: CVE Published:; 31 December 2002

🔔 Create Benjamin Lefevre Vulnerability Alert

What is CVE-2002-2200?

The Dobermann FORUM application versions 0.5 and earlier are susceptible to a remote file inclusion vulnerability. This issue allows an attacker to include and execute arbitrary PHP files by manipulating the 'subpath' variable in specific PHP scripts, including entete.php, enteteacceuil.php, index.php, and newtopic.php. As a result, attackers could compromise the integrity of the system, execute malicious code, and potentially gain unauthorized access to sensitive information. It is crucial for users to update to the latest software version and implement necessary mitigating strategies to protect their applications.

References

http://seclists.org/lists/bugtraq/2002/Oct/0397.html

mailing-listx_refsource_BUGTRAQ

http://www.securityfocus.com/bid/6057

vdb-entryx_refsource_BID

http://www.iss.net/security_center/static/10492.php

vdb-entryx_refsource_XF

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability Reserved
Nov 16, 2005
Vulnerability published
Dec 31, 2002

CVE-2002-2200 Data

JSON