CVE-2002-2106 PHP remote file inclusion vulnerability in WikkiTikkiTavi before 0.21 allows remote attackers to execute arbitrary PHP code via the TemplateDir variable, as demonstrated using conflict.php.
HighCVSS 7.5
EPSS 2.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
PHP remote file inclusion vulnerability in WikkiTikkiTavi before 0.21 allows remote attackers to execute arbitrary PHP code via the TemplateDir variable, as demonstrated using conflict.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wikkitikkitavi | = 0.5 | No fix listed |
| wikkitikkitavi | = 0.10 | No fix listed |
| wikkitikkitavi | = 0.20 | No fix listed |
References
- 1003307 exploit patch vdb-entry
- [tavi-devel] 20020102 "Tavi security advisory exploit mailing-list vendor-advisory
- 3946 exploit patch vdb-entry
- wikkitikkitavi-include-template(8001) vdb-entry