CVE-2002-0471

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

PHPNetToolpack 0.1 allows remote attackers to execute arbitrary code via shell metacharacters in the a_query variable.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published
Aug 12, 2002
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2002

CVE-2002-04725.0MSN Messenger Service 3.6, and possibly other versions, uses weak authentication when exchanging messages between clients, which allows remoCVE-2002-047310.0db.php in phpBB 2.0 (aka phpBB2) RC-3 and earlier allows remote attackers to execute arbitrary code from remote servers via the phpbb_root_pCVE-2002-04745.1Cross-site scripting vulnerability in ZeroForum allows remote attackers to execute arbitrary Javascript on web clients by embedding the scriCVE-2002-04755.1Cross-site scripting vulnerability in phpBB 1.4.4 and earlier allows remote attackers to execute arbitrary Javascript on web clients by embeCVE-2002-04765.0Standalone Macromedia Flash Player 5.0 allows remote attackers to save arbitrary files and programs via a .SWF file containing the undocumenCVE-2002-04777.5Standalone Macromedia Flash Player 5.0 before 5,0,30,2 allows remote attackers to execute arbitrary programs via a .SWF file containing the CVE-2002-04785.0The default configuration of Foundry Networks EdgeIron 4802F allows remote attackers to modify sensitive information via arbitrary SNMP commCVE-2002-04797.2Gravity Storm Service Pack Manager 2000 creates a hidden share (SPM2000c$) mapped to the C drive, which may allow local users to bypass acceCVE-2002-048010.0ISS RealSecure for Nokia devices before IPSO build 6.0.2001.141d is configured to allow a user "skank" on a machine "starscream" to become aCVE-2002-04815.1An interaction between Windows Media Player (WMP) and Outlook 2002 allows remote attackers to bypass Outlook security settings and execute JCVE-2002-04825.0Directory traversal vulnerability in PCI Netsupport Manager before version 7, when running web extensions, allows remote attackers to read aCVE-2002-04835.0index.php for PHP-Nuke 5.4 and earlier allows remote attackers to determine the physical pathname of the web server when the file parameter
CVE-2002-0471: Critical severity, CVSS 10.0 | Vulnix