VULNERABILITY INTELLIGENCE

CVE-2002-2019

CVSS score7.5 HIGH

EPSS probability2.65%

CISA KEVNot currently listed

Published2002-12-31

Last modified2026-06-16

Description

PHP remote file inclusion vulnerability in include_once.php in osCommerce (a.k.a. Exchange Project) 2.1 allows remote attackers to execute arbitrary PHP code via the include_file parameter.