CVE-2002-0446: Black Tie Project

Medium severity, CVSS 5.0. EPSS: 2.6% chance of exploitation in the next 30 days.

categorie.php3 in Black Tie Project (BTP) 0.4b through 0.5b allows remote attackers to determine the absolute path of the web server via an invalid category ID (cid) parameter, which leaks the pathname in an error message.

Affected products

• Black Tie Project Black Tie Project: version 0.4b only; version 0.5 only; version 0.5b only

Published 2002-07-26. Last modified 2026-06-16.