CVE-2002-1135: Phpwebsite

High severity, CVSS 7.5. EPSS: 6.6% chance of exploitation in the next 30 days.

modsecurity.php 1.10 and earlier, in phpWebSite 0.8.2 and earlier, allows remote attackers to execute arbitrary PHP source code via an inc_prefix parameter that points to the malicious code.

Affected products

• Phpwebsite Phpwebsite: version 0.8.2 only

Published 2002-10-04. Last modified 2026-06-16.