CVE-2002-1211: Jason Orcutt Prometheus

High severity, CVSS 7.5. EPSS: 2.8% chance of exploitation in the next 30 days.

Prometheus 6.0 and earlier allows remote attackers to execute arbitrary PHP code via a modified PROMETHEUS_LIBRARY_BASE that points to code stored on a remote server, which is then used in (1) index.php, (2) install.php, or (3) various test_*.php scripts.

Affected products

• Jason Orcutt Prometheus: version 3.0_beta only; version 4.0_beta only; version 6.0 only

Published 2002-11-12. Last modified 2026-06-16.