CVE-2002-0473

db.php in phpBB 2.0 (aka phpBB2) RC-3 and earlier allows remote attackers to execute arbitrary code from remote servers via the phpbb_root_path parameter.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2002-08-12

Last modified

2024-08-08

Affected products

• Phpbb (Phpbb Group)

References

• http://archives.neohapsis.com/archives/bugtraq/2002-03/0221.html
• http://archives.neohapsis.com/archives/bugtraq/2002-03/0229.html
• http://online.securityfocus.com/archive/82/262600
• http://phpbb.sourceforge.net/phpBB2/viewtopic.php?t=9483
• http://prdownloads.sourceforge.net/phpbb/phpBB-2.0.1.zip
• http://www.iss.net/security_center/static/8476.php
• http://www.osvdb.org/4268
• http://www.securityfocus.com/bid/4380