CVE-2002-2045

MEDIUM · CVSS 6.4 EPSS 1.71%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2002-12-31 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2002-2045

Severity

MEDIUM

CVSS

6.4

EPSS

1.71%

Original NVD Description

x_stat_admin.php in x-stat 2.3 and earlier allows remote attackers to (1) execute PHP commands such as phpinfo or (2) obtain the full path of the web server via an invalid action parameter, which leaks the pathname in an error message.