CVE-2002-2015: Postnuke Software Foundation Postnuke

High severity, CVSS 7.5. EPSS: 9.5% chance of exploitation in the next 30 days.

PHP file inclusion vulnerability in user.php in PostNuke 0.703 allows remote attackers to include arbitrary files and possibly execute code via the caselist parameter.

Affected products

• Postnuke Software Foundation Postnuke: version 0.703 only

Published 2002-12-31. Last modified 2026-06-16.