CVE-2002-2029 PHP, when installed on Windows with Apache and ScriptAlias for /php/ set to c:/php/, allows remote attackers to read arbitrary files and possibly execute arbitrary programs via an HTTP request for php...

HighCVSS 7.5 EPSS 23.1% Public exploit

Published: 2005-07-14 07:00
Updated: 2026-06-17 01:00
Exploit status: Public exploit available

Description

PHP, when installed on Windows with Apache and ScriptAlias for /php/ set to c:/php/, allows remote attackers to read arbitrary files and possibly execute arbitrary programs via an HTTP request for php.exe with a filename in the query string.

Affected products

Product	Affected versions	Fixed in
Apache HTTP Server	= 1.3.11	No fix listed
Apache HTTP Server	= 1.3.12	No fix listed
Apache HTTP Server	= 1.3.13	No fix listed
Apache HTTP Server	= 1.3.14	No fix listed
Apache HTTP Server	= 1.3.15	No fix listed
Apache HTTP Server	= 1.3.16	No fix listed
Apache HTTP Server	= 1.3.17	No fix listed
Apache HTTP Server	= 1.3.18	No fix listed
Apache HTTP Server	= 1.3.19	No fix listed
Apache HTTP Server	= 1.3.20	No fix listed

References

CVSS v2.0

7.5 High

AV:N/AC:L/Au:N/C:P/I:P/A:P

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: Partial
Integrity: Partial
Availability: Partial

Weakness & likelihood

EPSS (exploitation probability, 30 days): 23.11% (percentile 97.8)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

Apache 1.3.20 (Win32) - 'PHP.exe' Remote File Disclosure Exploit · Exploit Database (OffSec) · 2002-01-04