CVE-2002-1135

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

modsecurity.php 1.10 and earlier, in phpWebSite 0.8.2 and earlier, allows remote attackers to execute arbitrary PHP source code via an inc_prefix parameter that points to the malicious code.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published
Oct 4, 2002
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2002

CVE-2002-11377.5Buffer overflow in the Database Console Command (DBCC) that handles user inputs in Microsoft SQL Server 7.0 and 2000, including Microsoft DaCVE-2002-11387.5Microsoft SQL Server 7.0 and 2000, including Microsoft Data Engine (MSDE) 1.0 and Microsoft Desktop Engine (MSDE) 2000, writes output files CVE-2002-11395.0The Compressed Folders feature in Microsoft Windows 98 with Plus! Pack, Windows Me, and Windows XP does not properly check the destination fCVE-2002-11405.0The Sun Microsystems RPC library Services for Unix 3.0 Interix SD, as implemented on Microsoft Windows NT4, 2000, and XP, allows remote attaCVE-2002-11415.0An input validation error in the Sun Microsystems RPC library Services for Unix 3.0 Interix SD, as implemented on Microsoft Windows NT4, 200CVE-2002-11427.5Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 through 2.6, and InterCVE-2002-11435.0Microsoft Word and Excel allow remote attackers to steal sensitive information via certain field codes that insert the information when the CVE-2002-114510.0The xp_runwebtask stored procedure in the Web Tasks component of Microsoft SQL Server 7.0 and 2000, Microsoft Data Engine (MSDE) 1.0, and MiCVE-2002-11465.0The BIND 4 and BIND 8.2.x stub resolver libraries, and other libraries such as glibc 2.2.5 and earlier, libc, and libresolv, use the maximumCVE-2002-11477.1The HTTP administration interface for HP Procurve 4000M Switch firmware before C.09.16, with stacking features and remote administration enaCVE-2002-11485.0The default servlet (org.apache.catalina.servlets.DefaultServlet) in Tomcat 4.0.4 and 4.1.10 and earlier allows remote attackers to read souCVE-2002-11495.0The installation procedure for Invision Board suggests that users install the phpinfo.php program under the web root, which leaks sensitive
CVE-2002-1135: High severity, CVSS 7.5 | Vulnix