Back

CVE-2002-1885

PHP remote file inclusion vulnerability in showhits.php3 for PowerPhlogger (PPhlogger) 2.0.9 through 2.2.2 allows remote attackers to execute arbitrary PHP code via the rel_path parameter.

Published: Dec 31, 2002 Modified: Jun 16, 2026

CVSS Metrics

Affected Products (3)

Vendor Product Version
powerphlogger powerphlogger 2.0.9
powerphlogger powerphlogger 2.2.1
powerphlogger powerphlogger 2.2.2a

GitHub Security Advisory GHSA-7v25-xm54-46x6

PHP remote file inclusion vulnerability in showhits.php3 for PowerPhlogger (PPhlogger) 2.0.9...

Risk Scores

CVSS Score 7.5 / 10
EPSS Score 6.66%

Top 7% most likely to be exploited

Threat Score 32 / 100

Data Sources

NVD EPSS GitHub