CVE-2002-0446

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2002-07-26 · updated 2026-06-16

Description

categorie.php3 in Black Tie Project (BTP) 0.4b through 0.5b allows remote attackers to determine the absolute path of the web server via an invalid category ID (cid) parameter, which leaks the pathname in an error message.

Affected products

Black Tie Project: 0.4b, 0.5, 0.5b

References

http://www.iss.net/security_center/static/8439.php
http://www.securityfocus.com/archive/1/261681
http://www.securityfocus.com/bid/4275
http://www.iss.net/security_center/static/8439.php
http://www.securityfocus.com/archive/1/261681
http://www.securityfocus.com/bid/4275

Get alerted when CVE-2002-0446 or the next vulnerability affects your stack