CVE-2002-1435

Published: Apr 11, 2003Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

class.atkdateattribute.js.php in Achievo 0.7.0 through 0.9.1, except 0.8.2, allows remote attackers to execute arbitrary PHP code when the 'allow_url_fopen' setting is enabled via a URL in the config_atkroot parameter that points to the code.

Affected (10)

Products: Achievo: Achievo

Achievo

1 product

Achievo

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Achievo Achievo	Version 0.7.0
Achievo Achievo	Version 0.7.1
Achievo Achievo	Version 0.7.2
Achievo Achievo	Version 0.7.3
Achievo Achievo	Version 0.8.0
Achievo Achievo	Version 0.8.0_rc1
Achievo Achievo	Version 0.8.0_rc2
Achievo Achievo	Version 0.8.1
Achievo Achievo	Version 0.9.0
Achievo Achievo	Version 0.9.1