CVE-2002-2200

Benjamin Lefevre Dobermann FORUM 0.5 - Code Injection

Title source: llm

Description

Benjamin Lefevre Dobermann FORUM 0.5 and earlier allows remote attackers to remotely include and execute malicious PHP files via the "subpath" variablein (1) entete.php, (2) enteteacceuil.php, (3) index.php, or (4) newtopic.php.

Exploits (4)

exploitdb WRITEUP VERIFIED
by frog · textwebappsphp
https://www.exploit-db.com/exploits/21967
exploitdb WORKING POC VERIFIED
by frog · textwebappsphp
https://www.exploit-db.com/exploits/21969
exploitdb WORKING POC VERIFIED
by frog · textwebappsphp
https://www.exploit-db.com/exploits/21970
exploitdb WRITEUP VERIFIED
by frog · textwebappsphp
https://www.exploit-db.com/exploits/21968

Scores

EPSS 0.0335
EPSS Percentile 87.1%

Classification

Status draft

Affected Products (5)

benjamin_lefevre/dobermann_forum
benjamin_lefevre/dobermann_forum
benjamin_lefevre/dobermann_forum
benjamin_lefevre/dobermann_forum
benjamin_lefevre/dobermann_forum

Timeline

Published Dec 31, 2002
Tracked Since Feb 18, 2026