CVE-2002-1435

class.atkdateattribute.js.php in Achievo 0.7.0 through 0.9.1, except 0.8.2, allows remote attackers to execute arbitrary PHP code when the 'allow_url_fopen'…

published September 1, 2004

CVSS
—
EPSS
7%
Percentile
94.0
In the wild
Unconfirmed
What it is

class.atkdateattribute.js.php in Achievo 0.7.0 through 0.9.1, except 0.8.2, allows remote attackers to execute arbitrary PHP code when the 'allow_url_fopen' setting is enabled via a URL in the config_atkroot parameter that points to the code.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06840 · 94.0th percentile
Published
2004-09-01T04:00Z
EPSS history
Timeline
  • 01 SEP 04:00Z
    class.atkdateattribute.js.php in Achievo 0.7.0 through 0.9.1, except 0.8.2, allows remote attackers to execute arbitrary PHP code when the 'allow_url_fopen'…
    cvelistv5