CVE-2002-2029

published 2002-12-31

CVE-2002-2029: PHP, when installed on Windows with Apache and ScriptAlias for /php/ set to c:/php/, allows remote attackers to read arbitrary files and possibly execute…

high 7.5 CVSS 3.1

AV N AC L Au N C P I P A P

EXPLOIT

PHP, when installed on Windows with Apache and ScriptAlias for /php/ set to c:/php/, allows remote attackers to read arbitrary files and possibly execute arbitrary programs via an HTTP request for php.exe with a filename in the query string.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
apache	http_server	—	—
apache	http_server	—	—
apache	http_server	—	—
apache	http_server	—	—
apache	http_server	—	—
apache	http_server	—	—
apache	http_server	—	—
apache	http_server	—	—
apache	http_server	—	—
apache	http_server	—	—