CVE

Id
4674  
CVE No.
CVE-2002-0282  
Status
Candidate  
Description
DCP-Portal 3.7 through 4.5 allows remote attackers to obtain the physical path of the server via (1) a direct request to add_user.php, or via an invalid new_language parameter in (2) contents.php, (3) categories.php, or (4) files.php, which leaks the path in an error message.  
Phase
Modified (20050710)  
Votes
ACCEPT(2) Cole, Frech | NOOP(4) Armstrong, Cox, Foat, Wall  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
23423 4674 CVE-2002-0282 BUGTRAQ:20020228 [ARL02-A04] DCP-Portal System Information Path Disclosure  View
23424 4674 CVE-2002-0282 URL:http://marc.info/?l=bugtraq&m=101494497608620&w=2  View
23425 4674 CVE-2002-0282 BUGTRAQ:20020215 [ARL02-A02] DCP-Portal Root Path Disclosure Vulnerability  View
23426 4674 CVE-2002-0282 URL:http://marc.info/?l=bugtraq&m=101379160830631&w=2  View
23427 4674 CVE-2002-0282 CONFIRM:http://www.dcp-portal.com/files.php?action=viewcat&fcat_id=1  View
23428 4674 CVE-2002-0282 BID:4113  View
23429 4674 CVE-2002-0282 URL:http://www.securityfocus.com/bid/4113  View
23430 4674 CVE-2002-0282 XF:dcpportal-adduser-path-disclosure(8196)  View
23431 4674 CVE-2002-0282 URL:http://xforce.iss.net/xforce/xfdb/8196  View
23432 4674 CVE-2002-0282 XF:dcpportal-language-path-disclosure(8310)  View

Related JVN