CVE-2002-0434 Marcus S. Xenakis directory.php script allows remote attackers to execute arbitrary commands via shell metacharacters in the dir parameter.
HighCVSS 10.0
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Marcus S. Xenakis directory.php script allows remote attackers to execute arbitrary commands via shell metacharacters in the dir parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| marcus s. xenakis directory.php | All versions | No fix listed |
References
- xenakis-directory-execute-commands(8440) vdb-entry vendor-advisory
- 20020310 Marcus S. Xenakis "directory.php" allows arbitrary code execution mailing-list vendor-advisory
- 4278 vdb-entry vendor-advisory