CVE-2001-0899 Network Tools 0.2 for PHP-Nuke allows remote attackers to execute commands on the server via shell metacharacters in the $hostinput variable.

HighCVSS 7.5 EPSS 8.9%

Published: 2002-06-25 07:00
Updated: 2026-06-17 00:55
Exploit status: No public exploit known

Sign in for asset impact Search another CVE

Description

Network Tools 0.2 for PHP-Nuke allows remote attackers to execute commands on the server via shell metacharacters in the $hostinput variable.

Affected products

Product	Affected versions	Fixed in
phpnuke php-nuke	All versions	No fix listed
rick fournier network tools	= 0.2	No fix listed

References

20011116 Network Tool 0.2 Addon for PHPNuke vulnerable to remote command execution mailing-list
phpnukerz.org patch
phpnuke-nettools-command-execution(7578) vdb-entry

CVSS v2.0

7.5 High

AV:N/AC:L/Au:N/C:P/I:P/A:P

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: Partial
Integrity: Partial
Availability: Partial

Weakness & likelihood

EPSS (exploitation probability, 30 days): 8.91% (percentile 95.3)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

PHP-Nuke Network Tool 0.2 Addon - MetaCharacter Filtering Command Execution Exploit · Exploit Database (OffSec) · 2001-11-16