← Database

CVE-2002-0596

MEDIUM CVSS: 5.0 Published: 2002-06-18 Modified: 2026-06-16

Description

WebTrends Reporting Center 4.0d allows remote attackers to determine the real path of the web server via a GET request to get_od_toc.pl with an empty Profile parameter, which leaks the pathname in an error message.

Affected Platforms

Webtrends Reporting Center

Weakness Type

CWE-200

References