Every CVE Search/ Get API key

CVE-2002-0325

Directory traversal vulnerability in BadBlue before 1.6.1 allows remote attackers to read...

5.0 MediumPublic exploit

Directory traversal vulnerability in BadBlue before 1.6.1 allows remote attackers to read arbitrary files via a ... (modified dot dot) in the URL.

Exploit likelihood

37.8%Up 33.6 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

Directory traversal vulnerability in BadBlue before 1.6.1 allows remote attackers to read arbitrary files via a ... (modified dot dot) in the URL.

Record
CVE-2002-0325
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:P/A:N
Updated
2026-11-02
CVE List No score

Directory traversal vulnerability in BadBlue before 1.6.1 allows remote attackers to read arbitrary files via a ... (modified dot dot) in the URL.

Record
CVE-2002-0325
Updated
2026-11-02
EUVDEUVD-2002-0322 No score

Directory traversal vulnerability in BadBlue before 1.6.1 allows remote attackers to read arbitrary files via a ... (modified dot dot) in the URL.

Record
EUVD-2002-0322
Updated
2026-11-03
GitHub AdvisoriesGHSA-c447-cw8v-5jv4 No score

Directory traversal vulnerability in BadBlue before 1.6.1 allows remote attackers to read...

Directory traversal vulnerability in BadBlue before 1.6.1 allows remote attackers to read arbitrary files via a ... (modified dot dot) in the URL.

Record
GHSA-c447-cw8v-5jv4
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBWorking Resources BadBlue 1.5/1.6 - Directory Traversal2002-02-26

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2002-0325 is a medium vulnerability (CVSS 5.0) in Working Resources Inc. Badblue, published May 3, 2002. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 37.8%, the 98th percentile. No source names a fixed version.

References

MoveEnter Open