VULNERABILITY INTELLIGENCE

CVE-2002-0206

CVSS score7.5 HIGH
EPSS probability6.50%
CISA KEVNot currently listed
Published2002-05-16
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

index.php in Francisco Burzi PHP-Nuke 5.3.1 and earlier, and possibly other versions before 5.5, allows remote attackers to execute arbitrary PHP code by specifying a URL to the malicious code in the file parameter.

Primary references