CVE-2002-0282

CVE-2002-0282 describes a path disclosure vulnerability in DCP-Portal versions 3.7 through 4.5. Remote attackers can exploit this by directly requesting add_user.php or by providing an invalid new_language parameter to contents.php, categories.php, or files.php, causing the server's physical path to be revealed in an error message. This vulnerability has a CVSS score of 5.0, indicating a medium severity, and allows for information disclosure (Confidentiality: Partial) with low attack complexity and no authentication required. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit or ExploitDB, though it has garnered some community discussion.