CVE-2002-2249 PHP remote file inclusion vulnerability in News Evolution 2.0 allows remote attackers to execute arbitrary PHP commands via the neurl parameter to (1) backend.php, (2) screen.php, or (3) admin/modules...
HighCVSS 7.5
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP remote file inclusion vulnerability in News Evolution 2.0 allows remote attackers to execute arbitrary PHP commands via the neurl parameter to (1) backend.php, (2) screen.php, or (3) admin/modules/comment.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| php evolution news evolution | = 1.0 | No fix listed |
| php evolution news evolution | = 2.0 | No fix listed |
References
- 20021126 FreeNews & News Evolution (PHP) mailing-list
- 6260 exploit vdb-entry
- newsevolution-php-file-include(10709) vdb-entry