← Retour aux CVEs

CVE-2002-0998

N/A

Description

Directory traversal vulnerability in cafenews.php for CARE 2002 before beta 1.0.02 allows remote attackers to read arbitrary files via .. (dot dot) sequences and null characters in the lang parameter, which is processed by a call to the include function.

Details CVE

Score CVSS v3.1N/A

Publie10/4/2002

Derniere modification4/16/2026

Sourcenvd

Observations honeypot0

Produits affectes

care_2002:care_2002

References

http://archives.neohapsis.com/archives/bugtraq/2002-07/0128.html(cve@mitre.org)

http://www.care2x.com/modul.php?thispage=headlines&m_titel=NEWS&m_item=Headlines&lang=en(cve@mitre.org)

http://www.iss.net/security_center/static/9552.php(cve@mitre.org)

http://www.securityfocus.com/bid/5218(cve@mitre.org)

http://archives.neohapsis.com/archives/bugtraq/2002-07/0128.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.care2x.com/modul.php?thispage=headlines&m_titel=NEWS&m_item=Headlines&lang=en(af854a3a-2127-422b-91ae-364da2661108)

http://www.iss.net/security_center/static/9552.php(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/5218(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.