CVE-2002-2299

thatware 0.3-0.5.2 - Remote Code Execution via root_path Parameter

Title source: llm

Description

PHP remote file inclusion vulnerability in thatfile.php in Thatware 0.3 through 0.5.2 allows remote attackers to execute arbitrary PHP code via the root_path parameter.

References (3)

Core 3

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/10758

Exploit mailing-list x_refsource_bugtraq

http://archives.neohapsis.com/archives/bugtraq/2002-12/0000.html

Exploit vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1005733

Scores

EPSS 0.0134

EPSS Percentile 67.8%

Details

CWE

CWE-94

Status published

Products (1)

atthat.com/thatware < 0.5.2

Published Dec 31, 2002

Tracked Since Feb 18, 2026