← Database

CVE-2002-1135

HIGH CVSS: 7.5 Published: 2002-10-04 Modified: 2026-06-16

Description

modsecurity.php 1.10 and earlier, in phpWebSite 0.8.2 and earlier, allows remote attackers to execute arbitrary PHP source code via an inc_prefix parameter that points to the malicious code.

Affected Platforms

Phpwebsite Phpwebsite

Weakness Type

NVD-CWE-Other

References