CVE-2002-2045: x_stat_admin.php in x-stat 2.3 and earlier allows remote attackers to (1) execute PHP commands such as phpi...

Security readout for executives and security teams

CVE-2002-2045 affects legacy x-stat deployments, version 2.3 and earlier. A remotely reachable admin PHP script can expose server path details and may execute PHP functions such as phpinfo. Business urgency depends on whether this obsolete software is still internet-accessible. Exposure is likely limited to legacy web servers still running x-stat 2.3 or earlier with x_stat_admin.php reachable by remote users. The provided affected-product metadata is incomplete, so asset owners should verify by file path, package records, and application inventory. Prioritize discovery over broad emergency response. If internet-facing x-stat is found, treat remediation as urgent because the software is old, likely unsupported, and the described behavior can disclose sensitive environment details or execute PHP functions. Mitigation focus: Identify and retire any x-stat 2.3 or earlier installations.; Remove or disable x_stat_admin.php if x-stat is not required.; Restrict administrative PHP scripts to trusted networks and authenticated users..

Prepared

Jun 29, 2026, 19:05 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.