CVE-2002-1483
5.0
CVSS v2.0 Base Score
8.45%
LOW RiskEPSS (94th percentile)
NVD-CWE-Other
db4web_c and db4web_c.exe programs in DB4Web 3.4 and 3.6 allow remote attackers to read arbitrary files via an HTTP request whose argument is a filename of the form (1) C: (drive letter), (2) //absolute/path (double-slash), or (3) .. (dot-dot).
Published: 4/22/2003
Modified: 6/16/2026
Vulnerability Summary
CVSS v2 Score
5
AV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS Score (Exploitation Probability)
8.45%LOW Exploitation Risk
94th percentile
This vulnerability has a 8.45% probability of being exploited in the next 30 days, ranking higher than 94% of all scored CVEs.
CWE Classification
NVD-CWE-Other