CVE-2002-0473 File upload in n/a

Critical 10.0 Published 2 Apr 2003 Updated 8 Aug 2024

Remote attackers can execute arbitrary code on phpBB servers by manipulating the phpbb_root_path parameter in db.php.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2002-0473?

CVE-2002-0473 is a critical vulnerability in Phpbb Group Phpbb, published on 2 Apr 2003. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

db.php in phpBB 2.0 (aka phpBB2) RC-3 and earlier allows remote attackers to execute arbitrary code from remote servers via the phpbb_root_path parameter.

Which versions are affected by CVE-2002-0473?

It affects 1 product.

Products include Phpbb Group Phpbb.

How do I fix CVE-2002-0473?

No fix has been published for CVE-2002-0473 yet. Limit exposure of the affected software until one is available.

Is CVE-2002-0473 being exploited?

There is no known exploitation of CVE-2002-0473 in the wild and no public exploit code.

All Phpbb Group Phpbb vulnerabilities

Sources

Also known as GHSA-8xxh-294r-qp2g.