CVE-2002-2190
ArtsCore Studios CuteCast Forum 1.2 stores passwords in plaintext under the web document root,...
ArtsCore Studios CuteCast Forum 1.2 stores passwords in plaintext under the web document root, which allows remote attackers to obtain the passwords via an HTTP request to a .user file.
Exploit likelihood
What each source reports
NVD Score used
ArtsCore Studios CuteCast Forum 1.2 stores passwords in plaintext under the web document root, which allows remote attackers to obtain the passwords via an HTTP request to a .user file.
- Record
CVE-2002-2190- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
ArtsCore Studios CuteCast Forum 1.2 stores passwords in plaintext under the web document root, which allows remote attackers to obtain the passwords via an HTTP request to a .user file.
- Record
CVE-2002-2190- Updated
- 2026-11-02
EUVDEUVD-2002-2169 No score
ArtsCore Studios CuteCast Forum 1.2 stores passwords in plaintext under the web document root, which allows remote attackers to obtain the passwords via an HTTP request to a .user file.
- Record
EUVD-2002-2169- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fjr2-cfrj-vv43 No score
ArtsCore Studios CuteCast Forum 1.2 stores passwords in plaintext under the web document root,...
ArtsCore Studios CuteCast Forum 1.2 stores passwords in plaintext under the web document root, which allows remote attackers to obtain the passwords via an HTTP request to a .user file.
- Record
GHSA-fjr2-cfrj-vv43- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | CuteCast 1.2 - User Credential Disclosure | 2002-11-07 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2002-2190 is a high vulnerability (CVSS 7.5) in Artscore Studios Cutecast Forum, published December 31, 2002. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 6.69%, the 93rd percentile. No source names a fixed version.