← Database

CVE-2002-2019

HIGH CVSS: 7.5 Published: 2002-12-31 Modified: 2026-06-16

Description

PHP remote file inclusion vulnerability in include_once.php in osCommerce (a.k.a. Exchange Project) 2.1 allows remote attackers to execute arbitrary PHP code via the include_file parameter.

Affected Platforms

Oscommerce Oscommerce

Weakness Type

CWE-94

References