CVE-2002-0282: Codeworx Technologies Dcp-Portal

Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days.

DCP-Portal 3.7 through 4.5 allows remote attackers to obtain the physical path of the server via (1) a direct request to add_user.php, or via an invalid new_language parameter in (2) contents.php, (3) categories.php, or (4) files.php, which leaks the path in an error message.

Affected products

• Codeworx Technologies Dcp-Portal: version 3.7 only; version 4.0 only; version 4.1 only; version 4.2 only; version 4.5 only

Published 2002-05-31. Last modified 2026-06-16.