Lucene search

K
cveMitreCVE-2002-2015
HistoryJul 14, 2005 - 4:00 a.m.

CVE-2002-2015

2005-07-1404:00:00
mitre
web.nvd.nist.gov
27
cve-2002-2015
php
file inclusion
vulnerability
postnuke 0.703
remote attackers
arbitrary files
code execution

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.7

Confidence

Low

EPSS

0.024

Percentile

90.0%

PHP file inclusion vulnerability in user.php in PostNuke 0.703 allows remote attackers to include arbitrary files and possibly execute code via the caselist parameter.

Affected configurations

Nvd
Node
postnuke_software_foundationpostnukeMatch0.703
VendorProductVersionCPE
postnuke_software_foundationpostnuke0.703cpe:2.3:a:postnuke_software_foundation:postnuke:0.703:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.7

Confidence

Low

EPSS

0.024

Percentile

90.0%

Related for CVE-2002-2015