CVE-2002-0524: Asp-Nuke

Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days.

ASP-Nuke RC2 and earlier allows remote attackers to determine the absolute path of the server by (1) calling database-inc.asp with incorrect cookies, or (2) calling Post.asp with certain arguments, which leak the pathname in an error message.

Affected products

• Asp-Nuke Asp-Nuke: version rc1 only; version rc2 only

Published 2002-08-12. Last modified 2026-06-16.