CVE-2002-2200: Benjamin Lefevre Dobermann Forum

High severity, CVSS 7.5. EPSS: 7.1% chance of exploitation in the next 30 days.

Benjamin Lefevre Dobermann FORUM 0.5 and earlier allows remote attackers to remotely include and execute malicious PHP files via the "subpath" variablein (1) entete.php, (2) enteteacceuil.php, (3) index.php, or (4) newtopic.php.

Affected products

• Benjamin Lefevre Dobermann Forum: version 0.1 only; version 0.2 only; version 0.3 only; version 0.4 only; version 0.5 only

Published 2002-12-31. Last modified 2026-06-16.