CVE-2002-2019: Code Injection
Published Dec 31, 2002
·Updated
PHP remote file inclusion vulnerability in includeonce.php in osCommerce (a.k.a. Exchange Project) 2.1 allows remote attackers to execute arbitrary PHP code via the includefile parameter.
Affected Software
1 affected component
osCommerce oscommerce=2.1
Remediation
Patch Available
Event History
Dec 31, 2002
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
DescriptionSeverityWeaknessAffected Software
Jul 14, 2005
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-2019?
CVE-2002-2019 is considered critical due to its potential for remote code execution.
2
How do I fix CVE-2002-2019?
To fix CVE-2002-2019, upgrade to a patched version of osCommerce that addresses the remote file inclusion vulnerability.
3
Who is affected by CVE-2002-2019?
CVE-2002-2019 affects users running osCommerce version 2.1.
4
What type of vulnerability is CVE-2002-2019?
CVE-2002-2019 is classified as a remote file inclusion vulnerability.
5
What can attackers do with CVE-2002-2019?
Attackers exploiting CVE-2002-2019 can execute arbitrary PHP code on the affected server.