CVE-2002-2217
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8 High
AI Score
Confidence
Low
0.076 Low
EPSS
Percentile
94.2%
Multiple PHP remote file inclusion vulnerabilities in Web Server Creator - Web Portal (WSC-WebPortal) 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the (1) l parameter to customize.php or the (2) pg parameter to index.php.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| comscripts:web_server_creator | comscripts web server creator | eq | 0.1 |
References
archives.neohapsis.com/archives/bugtraq/2002-11/0303.html
securitytracker.com/id?1005712
www.frog-man.org/tutos/WSC-WebPortal.txt
www.securityfocus.com/bid/19896
www.securityfocus.com/bid/6251
exchange.xforce.ibmcloud.com/vulnerabilities/10689
exchange.xforce.ibmcloud.com/vulnerabilities/28815
www.exploit-db.com/exploits/2318
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8 High
AI Score
Confidence
Low
0.076 Low
EPSS
Percentile
94.2%