CVE-2002-2297

Atthat.com Thatware - Code Injection

Title source: rule

Description

PHP remote file inclusion vulnerability in artlist.php in Thatware 0.5.2 and 0.5.3 allows remote attackers to execute arbitrary PHP code via the root_path parameter.

Scores

EPSS 0.0057
EPSS Percentile 68.4%

Classification

CWE
CWE-94
Status draft

Affected Products (2)

atthat.com/thatware
atthat.com/thatware

Timeline

Published Dec 31, 2002
Tracked Since Feb 18, 2026