Back to CVE Browser

CVE-2002-1868

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0230%

EPSS Percentile43.42th

PublishedDec 31, 2002

Last ModifiedApr 16, 2026

Vulnerability Description

Dispair 0.1 and 0.2 allows remote attackers to execute arbitrary shell commands via certain form fields.

Affected Platforms (CPE)

📦

Daniel Stenberg

Dispair

= 0.1

📦

Daniel Stenberg

Dispair

= 0.2

References & Advisories

🔗 http://www.contactor.se/~dast/dispair/dispair.cgi?file=dispair-0.3.tar.gz&dir=&view=CHANGES

🔗 http://www.iss.net/security_center/static/9787.php

🔗 http://www.securityfocus.com/bid/5392

🔗 http://www.contactor.se/~dast/dispair/dispair.cgi?file=dispair-0.3.tar.gz&dir=&view=CHANGES

🔗 http://www.iss.net/security_center/static/9787.php

🔗 http://www.securityfocus.com/bid/5392

Related Vulnerabilities

CVE-2002-146610.0

CafeLog b2 Weblog Tool 2.06pre4, with allow_fopen_url enabled, allows remote attackers to execute arbitrary PHP code via the b2inc...

CVE-2002-147810.0

Cacti before 0.6.8 allows attackers to execute arbitrary commands via the "Data Input" option in console mode.

CVE-2002-144010.0

The Gateway GS-400 server has a default root password of "0001n" that can not be changed via the administrative interface, which c...

CVE-2002-148210.0

SQL injection vulnerability in login.php for phpGB 1.20 and earlier, when magic_quotes_gpc is not enabled, allows remote attackers...