CVE-2002-0462

bigsam_guestbook.php for Big Sam (Built-In Guestbook Stand-Alone Module) 1.1.08 and earlier allows remote attackers to cause a denial of service (CPU consumption) or obtain the absolute path of the web server via a displayBegin parameter with a very large number, which leaks the web path in an error message when PHP safe_mode is enabled, or consumes resources when safe_mode is not enabled.

• http://www.gezzed.net/bigsam/bigsam.1_1_12.php.txt
• http://www.iss.net/security_center/static/8478.phpPatch, Vendor Advisory
• http://www.iss.net/security_center/static/8479.phpPatch, Vendor Advisory
• http://www.osvdb.org/5287
• http://www.osvdb.org/5288
• http://www.securityfocus.com/archive/1/262735Vendor Advisory
• http://www.securityfocus.com/bid/4312Exploit, Patch, Vendor Advisory
• http://www.gezzed.net/bigsam/bigsam.1_1_12.php.txt
• http://www.iss.net/security_center/static/8478.phpPatch, Vendor Advisory
• http://www.iss.net/security_center/static/8479.phpPatch, Vendor Advisory
• http://www.osvdb.org/5287
• http://www.osvdb.org/5288
• http://www.securityfocus.com/archive/1/262735Vendor Advisory
• http://www.securityfocus.com/bid/4312Exploit, Patch, Vendor Advisory

Published

Aug 12, 2002

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2002-0456Eudora 5.1 and earlier versions stores attachments in a dire…
• CVE-2002-0457Cross-site scripting vulnerability in signgbook.php for BG G…
• CVE-2002-0458Cross-site scripting vulnerability in News-TNK 1.2.1 and ear…
• CVE-2002-0459Cross-site scripting vulnerability in Board-TNK 1.3.1 and ea…
• CVE-2002-0460Bitvise WinSSHD before 2002-03-16 allows remote attackers to…
• CVE-2002-0461Internet Explorer 5.01 through 6 allows remote attackers to …
• CVE-2002-0463home.php in ARSC (Really Simple Chat) 1.0.1 and earlier allo…
• CVE-2002-0464Directory traversal vulnerability in Hosting Controller 1.4.…
• CVE-2002-0465Directory traversal vulnerability in filemanager.asp for Hos…
• CVE-2002-0466Hosting Controller 1.4.1 and earlier allows remote attackers…
• CVE-2002-0467Buffer overflows in Ecartis (formerly Listar) 1.0.0 before s…
• CVE-2002-0468Buffer overflows in Ecartis (formerly Listar) 1.0.0 in snaps…