cbcvebase.
CVE-2002-2106
published 2002-12-31

CVE-2002-2106: PHP remote file inclusion vulnerability in WikkiTikkiTavi before 0.21 allows remote attackers to execute arbitrary PHP code via the TemplateDir variable, as…

PriorityP334high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
2.69%
84.0th percentile
PHP remote file inclusion vulnerability in WikkiTikkiTavi before 0.21 allows remote attackers to execute arbitrary PHP code via the TemplateDir variable, as demonstrated using conflict.php.

Affected

3 ranges
VendorProductVersion rangeFixed in
wikkitikkitaviwikkitikkitavi——
wikkitikkitaviwikkitikkitavi——
wikkitikkitaviwikkitikkitavi——
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.