CVE-2002-0953: PHP Address

High severity, CVSS 7.5. EPSS: 3.8% chance of exploitation in the next 30 days.

globals.php in PHP Address before 0.2f, with the PHP allow_url_fopen and register_globals variables enabled, allows remote attackers to execute arbitrary PHP code via a URL to the code in the LangCookie parameter.

Affected products

• PHP Address PHP Address: version 0.2e only

Published 2002-10-04. Last modified 2026-06-16.