CVE-2002-2094

CVE-2002-2094 describes an information disclosure vulnerability in Joe Testa hellbent 01, allowing remote attackers to determine the full web root directory path. By sending specific GET requests, an attacker can deduce the correct parent directory through varying error responses, leading to a successful path disclosure. This vulnerability has a CVSS score of 5.0, indicating a medium severity with low attack complexity and potential for partial confidentiality impact. While there is no evidence of active exploitation or public exploit code, the vulnerability has garnered significant community discussion.