{"id":"CVE-2002-2200","aliases":["EUVD-2002-2179","GHSA-ffpg-p6mg-8vj9"],"status":"published","title":"Benjamin Lefevre Dobermann FORUM 0.5 and earlier allows remote attackers to remotely include and...","description":"Benjamin Lefevre Dobermann FORUM 0.5 and earlier allows remote attackers to remotely include and execute malicious PHP files via the \"subpath\" variablein (1) entete.php, (2) enteteacceuil.php, (3) index.php, or (4) newtopic.php.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.07125,"percentile":0.94296,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2002-12-31T05:00:00Z","modified":"2026-06-16T22:00:49Z","exploits":[{"source":"exploitdb","id":"EDB-21967","title":"Benjamin Lefevre Dobermann Forum 0.x - 'entete.php?subpath' Remote File Inclusion","type":"webapps","platform":"php","date":"2002-10-28","verified":true,"url":"https://www.exploit-db.com/exploits/21967"},{"source":"exploitdb","id":"EDB-21968","title":"Benjamin Lefevre Dobermann Forum 0.x - 'enteteacceuil.php?subpath' Remote File Inclusion","type":"webapps","platform":"php","date":"2002-10-28","verified":true,"url":"https://www.exploit-db.com/exploits/21968"},{"source":"exploitdb","id":"EDB-21969","title":"Benjamin Lefevre Dobermann Forum 0.x - 'index.php?subpath' Remote File Inclusion","type":"webapps","platform":"php","date":"2002-10-28","verified":true,"url":"https://www.exploit-db.com/exploits/21969"},{"source":"exploitdb","id":"EDB-21970","title":"Benjamin Lefevre Dobermann Forum 0.x - 'newtopic.php?subpath' Remote File Inclusion","type":"webapps","platform":"php","date":"2002-10-28","verified":true,"url":"https://www.exploit-db.com/exploits/21970"}],"products":[{"vendor":"benjamin_lefevre","product":"dobermann_forum"}],"references":[{"url":"http://seclists.org/lists/bugtraq/2002/Oct/0397.html","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.securityfocus.com/bid/6057","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.iss.net/security_center/static/10492.php","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2002-2200"},{"url":"https://github.com/advisories/GHSA-ffpg-p6mg-8vj9"}],"sources":{"cve":[{"id":"CVE-2002-2200","description":"Benjamin Lefevre Dobermann FORUM 0.5 and earlier allows remote attackers to remotely include and execute malicious PHP files via the \"subpath\" variablein (1) entete.php, (2) enteteacceuil.php, (3) index.php, or (4) newtopic.php.","status":"published","published":"2005-11-16T21:17:00Z","modified":"2024-08-08T03:51:17.883Z","updated_at":"2026-11-02T14:33:54.29664Z"}],"euvd":[{"id":"EUVD-2002-2179","description":"Benjamin Lefevre Dobermann FORUM 0.5 and earlier allows remote attackers to remotely include and execute malicious PHP files via the \"subpath\" variablein (1) entete.php, (2) enteteacceuil.php, (3) index.php, or (4) newtopic.php.","status":"published","published":"2005-11-16T21:17:00Z","modified":"2024-08-08T03:51:17Z","updated_at":"2026-11-03T01:14:54.410056Z"}],"ghsa":[{"id":"GHSA-ffpg-p6mg-8vj9","title":"Benjamin Lefevre Dobermann FORUM 0.5 and earlier allows remote attackers to remotely include and...","description":"Benjamin Lefevre Dobermann FORUM 0.5 and earlier allows remote attackers to remotely include and execute malicious PHP files via the \"subpath\" variablein (1) entete.php, (2) enteteacceuil.php, (3) index.php, or (4) newtopic.php.","status":"published","published":"2022-04-30T18:22:41Z","modified":"2023-01-30T05:06:27Z","updated_at":"2026-11-02T14:47:30.041148Z"}],"nvd":[{"id":"CVE-2002-2200","description":"Benjamin Lefevre Dobermann FORUM 0.5 and earlier allows remote attackers to remotely include and execute malicious PHP files via the \"subpath\" variablein (1) entete.php, (2) enteteacceuil.php, (3) index.php, or (4) newtopic.php.","status":"published","published":"2002-12-31T05:00:00Z","modified":"2026-06-16T22:00:49.91Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:00:43.787686Z"}]}}