CVE-2002-0206

HIGH 7.5CVE-2002-0206 · Published 16/05/2002 · updated 16/06/2026

In short

CVE-2002-0206 is a HIGH (CVSS 7.5) vulnerability affecting php-nuke (francisco burzi).
Chance of exploitation in the next 30 days (EPSS): 6.5%, higher than 93.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
php-nuke francisco_burzi	`= 1.0= 2.5= 3.0= 4.0= 4.3= 4.4= 4.4.1a= 5.0= 5.0.1= 5.1= 5.2= 5.2a= 5.3.1`	No fix yet

Description

index.php in Francisco Burzi PHP-Nuke 5.3.1 and earlier, and possibly other versions before 5.5, allows remote attackers to execute arbitrary PHP code by specifying a URL to the malicious code in the file parameter.

References

marc.info
kb.cert.org/vuls/id/221683 · US Government Resource
securityfocus.com/bid/3889
exchange.xforce.ibmcloud.com/vulnerabilities/7914

More vulnerabilities in php-nuke

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

php-nuke

francisco_burzi

= 1.0= 2.5= 3.0= 4.0= 4.3= 4.4= 4.4.1a= 5.0= 5.0.1= 5.1= 5.2= 5.2a= 5.3.1

No fix yet

More vulnerabilities in php-nuke

See all →