CVE-2002-2287: Code Injection
PHP remote file inclusion vulnerability in quickreply.php for phpBB Advanced Quick Reply Hack 1.0.0 and 1.1.0 allows remote attackers to execute arbitrary PHP code via the phpbbrootpath parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2002-2287?
CVE-2002-2287 is classified as a high severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2002-2287?
To fix CVE-2002-2287, update to the latest version of the phpBB Advanced Quick Reply Hack or remove the vulnerable scripts from your server.
What are the affected versions of the phpBB Advanced Quick Reply Hack in CVE-2002-2287?
The affected versions are phpBB Advanced Quick Reply Hack 1.0.0 and 1.1.0.
Can CVE-2002-2287 lead to data compromise?
Yes, CVE-2002-2287 can lead to data compromise as attackers can execute arbitrary PHP code.
How can I check if my site is vulnerable to CVE-2002-2287?
You can check for vulnerabilities by reviewing your phpBB Advanced Quick Reply Hack version and the related configuration for insecure parameters.