CVE-2002-0953
EXPLOITEDPHP Address < 0.2f - Remote Code Execution via LangCookie Parameter
Title source: llmExploitation Summary
CVE-2002-0953 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit from researchers including Tim Vandermeerch.
AI-analyzed exploit summary This exploit demonstrates a remote file inclusion vulnerability in PHP-Address, allowing an attacker to execute arbitrary PHP code by including a remote script via the LangCookie parameter. The provided example shows directory listing execution via passthru().
Description
globals.php in PHP Address before 0.2f, with the PHP allow_url_fopen and register_globals variables enabled, allows remote attackers to execute arbitrary PHP code via a URL to the code in the LangCookie parameter.
Exploits (1)
This exploit demonstrates a remote file inclusion vulnerability in PHP-Address, allowing an attacker to execute arbitrary PHP code by including a remote script via the LangCookie parameter. The provided example shows directory listing execution via passthru().