Vulnerability in Postnuke Software Foundation

CVE-2002-2015

PHP file inclusion vulnerability in user.php in PostNuke 0.703 allows remote attackers to include arbitrary files and possibly execute code via the caselist parameter.

EPSS: 0.095 (94.9th percentile) — read the EPSS interpretation.

Affected products

Postnuke_software_foundation Postnuke — versions 0.703
N/a — versions n/a

References

cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
cve@mitre.org (Patch, vdb-entry, x_refsource_XF)