CVE-2002-0483
Published Aug 12, 2002
Last updated 16 years ago
Overview
- Description
- index.php for PHP-Nuke 5.4 and earlier allows remote attackers to determine the physical pathname of the web server when the file parameter is set to index.php, which triggers an error message that leaks the pathname.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 5
- Impact score
- 2.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "93B755A9-694E-49FA-9068-353203AF9965"
},
{
"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:5.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CA0B88AD-CACF-4E48-A4B1-313FFE32D058"
},
{
"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FF4C3F85-A23C-40B9-9B0F-564E7C254AA5"
},
{
"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:5.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4EAF55C4-F0A7-4A36-B203-83670D58483F"
},
{
"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:5.2a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E3ED3BFC-C8CF-4537-832C-0D00400AC064"
},
{
"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:5.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C94B62CA-8D34-4B37-8748-1FE64F0299DF"
},
{
"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:5.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8720AE61-41C7-4EA8-8C01-81AC0BFACBCC"
}
],
"operator": "OR"
}
]
}
]