5
CVSSv2

CVE-2002-0524

Published: 12/08/2002 Updated: 05/09/2008
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

ASP-Nuke RC2 and previous versions allows remote malicious users to determine the absolute path of the server by (1) calling database-inc.asp with incorrect cookies, or (2) calling Post.asp with certain arguments, which leak the pathname in an error message.

Vulnerable Product Search on Vulmon Subscribe to Product

asp-nuke asp-nuke rc1

asp-nuke asp-nuke rc2