CVE-2002-2029

PHP, when installed on Windows with Apache and ScriptAlias for /php/ set to c:/php/, allows remote attackers to read arbitrary files and possibly execute…

published July 14, 2005

CVSS
—
EPSS
23%
Percentile
97.7
In the wild
Unconfirmed
What it is

PHP, when installed on Windows with Apache and ScriptAlias for /php/ set to c:/php/, allows remote attackers to read arbitrary files and possibly execute arbitrary programs via an HTTP request for php.exe with a filename in the query string.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.23110 · 97.7th percentile
Published
2005-07-14T04:00Z
EPSS history
Timeline
  • 14 JUL 04:00Z
    PHP, when installed on Windows with Apache and ScriptAlias for /php/ set to c:/php/, allows remote attackers to read arbitrary files and possibly execute…
    cvelistv5