CVE-2002-0446: categorie.php3 in Black Tie Project (BTP) 0.4b through 0.5b allows remote attackers to determine the absolu...

Security readout for executives and security teams

This is an old information disclosure issue in Black Tie Project 0.4b through 0.5b. A malformed category request can make the application reveal the server’s filesystem path in an error message. That does not grant access by itself, but it can help attackers map the environment for later attacks. Likely limited to legacy internet-facing or archived deployments of Black Tie Project 0.4b to 0.5b. Most modern environments are unlikely to run this software, but forgotten PHP applications on old virtual hosts are plausible exposure points. Treat this as a low-urgency legacy exposure cleanup item unless BTP is still public-facing. The business risk is attacker reconnaissance, especially if old PHP applications coexist with sensitive systems or weak configurations. Mitigation focus: Inventory public web roots for Black Tie Project 0.4b through 0.5b.; Check vendor or advisory archives for any supported update or replacement guidance.; Remove or isolate obsolete BTP deployments from public access..

Prepared

Jul 1, 2026, 06:51 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.