CVE-2002-0953

globals.php in PHP Address before 0.2f, with the PHP allowurlfopen and registerglobals variables enabled, allows remote attackers to execute arbitrary PHP code via a URL to the code in the LangCookie parameter...

CVE-2002-0953

The CVE-2002-0953 entry concerns the PHP Address product, prior to version 0.2f, where enabling allow_url_fopen and register_globals creates a remote code execution risk. The vulnerability allows an attacker to supply a URL containing code in the LangCookie parameter, which is then executed by th...