CVE-2002-0483

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

index.php for PHP-Nuke 5.4 and earlier allows remote attackers to determine the physical pathname of the web server when the file parameter is set to index.php, which triggers an error message that leaks the pathname.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://online.securityfocus.com/archive/1/263337Vendor Advisory
http://www.iss.net/security_center/static/8618.phpVendor Advisory
http://www.securityfocus.com/bid/4333Exploit, Vendor Advisory
http://online.securityfocus.com/archive/1/263337Vendor Advisory
http://www.iss.net/security_center/static/8618.phpVendor Advisory
http://www.securityfocus.com/bid/4333Exploit, Vendor Advisory

Timeline

Published: Aug 12, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-04845.0move_uploaded_file in PHP does not does not check for the base directory (open_basedir), which could allow remote attackers to upload files CVE-2002-04857.5Norton Anti-Virus (NAV) allows remote attackers to bypass content filtering via attachments whose Content-Type and Content-Disposition heade CVE-2002-04867.2Intellisol Xpede 4.1 uses weak encryption to store authentication information in cookies, which could allow local users with access to the c CVE-2002-04874.6Intellisol Xpede 4.1 stores passwords in plaintext in a Javascript "session timeout" re-authentication capability, which could allow local u CVE-2002-048810.0Linux Directory Penguin traceroute.pl CGI script 1.0 allows remote attackers to execute arbitrary code via shell metacharacters in the host CVE-2002-048910.0Linux Directory Penguin NsLookup CGI script (nslookup.pl) 1.0 allows remote attackers to execute arbitrary code via shell metacharacters in CVE-2002-049010.0Instant Web Mail before 0.60 does not properly filter CR/LF sequences, which allows remote attackers to (1) execute arbitrary POP commands v CVE-2002-049110.0admin.php in AlGuest 1.0 guestbook checks for the existence of the admin cookie to authenticate the AlGuest administrator, which allows remo CVE-2002-04925.0dcshop.cgi in DCShop 1.002 Beta allows remote attackers to delete arbitrary setup files via a null character in the database parameter.CVE-2002-04937.5Apache Tomcat may be started without proper security settings if errors are encountered while reading the web.xml file, which could allow at CVE-2002-04947.5Cross-site scripting vulnerability in WebSight Directory System 0.1 allows remote attackers to execute arbitrary Javascript and gain access CVE-2002-049510.0csSearch.cgi in csSearch 2.3 and earlier allows remote attackers to execute arbitrary Perl code via the savesetup command and the setup para