CVE-2002-2167: Thorsten Korner 123tkshop

Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days.

Directory traversal vulnerability in function_foot_1.inc.php for Thorsten Korner 123tkShop before 0.3.1 allows remote attackers to read arbitrary files via .. (dot dot) sequences terminated by a null character in the $designNo variable, which is part of an "include" function call.

Affected products

• Thorsten Korner 123tkshop: version 0.2 only; version 0.3 only

Published 2002-12-31. Last modified 2026-06-16.