CVE-2002-2015: High severity Postnuke Software Foundation Postnuke vulnerability
Published Dec 31, 2002
·Updated
PHP file inclusion vulnerability in user.php in PostNuke 0.703 allows remote attackers to include arbitrary files and possibly execute code via the caselist parameter.
Affected Software
1 affected component
Postnuke Software Foundation Postnuke=0.703
Remediation
Patch Available
Event History
Dec 31, 2002
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
RemedyDescriptionSeverityAffected Software
Jul 14, 2005
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-2015?
CVE-2002-2015 has a high severity rating due to its ability to allow remote file inclusion and potential code execution.
2
How do I fix CVE-2002-2015?
To fix CVE-2002-2015, upgrade PostNuke to a later version where this vulnerability has been patched.
3
What systems are affected by CVE-2002-2015?
CVE-2002-2015 affects PostNuke version 0.703.
4
Can CVE-2002-2015 lead to a remote attack?
Yes, CVE-2002-2015 can allow remote attackers to include arbitrary files, leading to code execution.
5
Is CVE-2002-2015 still a concern today?
CVE-2002-2015 should not be a concern if PostNuke is updated to a version beyond 0.703, but systems still running the old version are at risk.