CVE-2002-0998

MEDIUM 5.0CVE-2002-0998 · Published 04/10/2002 · updated 16/06/2026

In short

CVE-2002-0998 is a MEDIUM (CVSS 5.0) vulnerability affecting care 2002 (care 2002).
Chance of exploitation in the next 30 days (EPSS): 2.3%, higher than 83.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
care 2002 care_2002	`= 1.0= 1.0.01`	No fix yet

Description

Directory traversal vulnerability in cafenews.php for CARE 2002 before beta 1.0.02 allows remote attackers to read arbitrary files via .. (dot dot) sequences and null characters in the lang parameter, which is processed by a call to the include function.

References

archives.neohapsis.com/archives/bugtraq/2002-07/0128.html
care2x.com/modul.php · URL Repurposed
iss.net/security_center/static/9552.php · Patch
securityfocus.com/bid/5218 · Exploit

More vulnerabilities in care 2002

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free