CVE-2002-1515: Coolforum

Medium severity, CVSS 5.0. EPSS: 2.3% chance of exploitation in the next 30 days.

Directory traversal vulnerability in avatar.php in CoolForum 0.5 beta allows remote attackers to read arbitrary files via .. (dot dot) sequences in the img parameter.

Affected products

• Coolforum Coolforum: version 0.5_beta only

Published 2003-04-02. Last modified 2026-06-16.