CVEvulnerability

CVE-2002-0282

5.0 MEDIUM Published 2002-05-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2002-05-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N

Description

DCP-Portal 3.7 through 4.5 allows remote attackers to obtain the physical path of the server via (1) a direct request to add_user.php, or via an invalid new_language parameter in (2) contents.php, (3) categories.php, or (4) files.php, which leaks the path in an error message.

Affected configurations

• codeworx technologies dcp-portal 3.7 • codeworx technologies dcp-portal 4.0 • codeworx technologies dcp-portal 4.1 • codeworx technologies dcp-portal 4.2 • codeworx technologies dcp-portal 4.5

References