Unrated severityNVD Advisory· Published Oct 4, 2002· Updated Apr 16, 2026

CVE-2002-1135

Description

modsecurity.php 1.10 and earlier, in phpWebSite 0.8.2 and earlier, allows remote attackers to execute arbitrary PHP source code via an inc_prefix parameter that points to the malicious code.

Affected products

Phpwebsite/Phpwebsite
cpe:2.3:a:phpwebsite:phpwebsite:0.8.2:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

phpwebsite.appstate.edu/article.phpnvdVendor Advisory
marc.infonvd
www.iss.net/security_center/static/10164.phpnvd
www.osvdb.org/3848nvd
www.securityfocus.com/bid/5779nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.004
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000