CVE-2002-0441

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Directory traversal vulnerability in imlist.php for Php Imglist allows remote attackers to read arbitrary code via a .. (dot dot) in the cwd parameter.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.iss.net/security_center/static/8441.phpPatch, Vendor Advisory
http://www.liquidpulse.net/get.lp?id=17
http://www.securityfocus.com/archive/1/261221Vendor Advisory
http://www.securityfocus.com/bid/4276Patch, Vendor Advisory
http://www.iss.net/security_center/static/8441.phpPatch, Vendor Advisory
http://www.liquidpulse.net/get.lp?id=17
http://www.securityfocus.com/archive/1/261221Vendor Advisory
http://www.securityfocus.com/bid/4276Patch, Vendor Advisory

Timeline

Published: Jul 26, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-04427.2Buffer overflow in dlvr_audit for Caldera OpenServer 5.0.5 and 5.0.6 allows local users to gain root privileges.CVE-2002-04434.6Microsoft Windows 2000 allows local users to bypass the policy that prohibits reusing old passwords by changing the current password before CVE-2002-04447.5Microsoft Windows 2000 running the Terminal Server 90-day trial version, and possibly other versions, does not apply group policies to incom CVE-2002-04455.0article.php in PHP FirstPost 0.1 allows allows remote attackers to obtain the full pathname of the server via an invalid post number in the CVE-2002-04465.0categorie.php3 in Black Tie Project (BTP) 0.4b through 0.5b allows remote attackers to determine the absolute path of the web server via an CVE-2002-04475.0Directory traversal vulnerability in Xerver Free Web Server 2.10 and earlier allows remote attackers to list arbitrary directories via a .. CVE-2002-04485.0Xerver Free Web Server 2.10 and earlier allows remote attackers to cause a denial of service (crash) via an HTTP request that contains many CVE-2002-044910.0Buffer overflow in webpsvc.exe for Talentsoft Web+ 5.0 and earlier allows remote attackers to execute arbitrary code via a long argument to CVE-2002-045010.0Buffer overflow in Talentsoft Web+ 5.0 and earlier allows remote attackers to execute arbitrary code via a long Web Markup Language (wml) fi CVE-2002-04517.5filemanager_forms.php in PHProjekt 3.1 and 3.1a allows remote attackers to execute arbitrary PHP code by specifying the URL to the code in t CVE-2002-04527.5Foundry Networks ServerIron switches do not decode URIs when applying "url-map" rules, which could make it easier for attackers to cause the CVE-2002-04537.5The account lockout capability in Oblix NetPoint 5.2 and earlier only locks out users once for the specified lockout period, which makes it