CVE-2002-2299: Atthat.com Thatware

Medium severity, CVSS 6.8. EPSS: 1.3% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in thatfile.php in Thatware 0.3 through 0.5.2 allows remote attackers to execute arbitrary PHP code via the root_path parameter.

Affected products

• Atthat.com Thatware: up to and including 0.5.2

Published 2002-12-31. Last modified 2026-06-16.