CVE-2002-0206

CVE-2002-0206 describes an arbitrary file inclusion vulnerability in Francisco Burzi PHP-Nuke versions 5.3.1 and earlier, potentially affecting other versions before 5.5. This flaw allows remote attackers to execute arbitrary PHP code by manipulating the "file" parameter to point to a malicious URL. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog or having active Metasploit/Nuclei exploits, an ExploitDB entry for PHP-Nuke 4.x/5.x indicates public exploit code availability, though there is no evidence of widespread community discussion or media coverage.