Unscored severity · published Dec 31, 2002
CVE-2002-2106
PHP remote file inclusion vulnerability in WikkiTikkiTavi before 0.21 allows remote attackers to execute arbitrary PHP code via the TemplateDir variable, as demonstrated using…
–
CVSS
2.7%
EPSS
No
On KEV
Description
PHP remote file inclusion vulnerability in WikkiTikkiTavi before 0.21 allows remote attackers to execute arbitrary PHP code via the TemplateDir variable, as demonstrated using conflict.php.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.7% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WI
Wikkitikkitavi · Wikkitikkitavi
0.5; 0.10; 0.20 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-2106
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-2106
Exploit
http://securitytracker.com/id?1003307
Exploit
http://sourceforge.net/mailarchive/message.php?msg_id=185752
Exploit
http://www.securityfocus.com/bid/3946
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/8001
More from Wikkitikkitavi
–
CVE-2009-0602
Unrestricted file upload vulnerability in upload.php in WikkiTikkiTavi 1.11 allows remote attackers to execute arbitrary code by uploading a file with an executable extension,…