PT-2003-1174 · Unknown · Easy Homepage Creator

Publicado 2003-03-18 · Atualizado 2008-09-05 · CVE-2002-1427

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Easy Homepage Creator version 1.0

Description The issue concerns the print html to file function in edit.cgi, which fails to verify user credentials. This allows remote attackers to modify home pages belonging to other users.

Recommendations For Easy Homepage Creator version 1.0, consider disabling the print html to file function in edit.cgi until a patch is available to prevent unauthorized modifications to user home pages.

Exploit

Correção

Identificadores relacionados

CVE-2002-1427

Produtos afetados

Easy Homepage Creator

Referências · 5

• 🔥 https://exploit-db.com/exploits/21658 · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2002-07/0350.html · Exploit
• 🔥 http://securityfocus.com/bid/5340 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-1427 · Nota de Segurança
• http://iss.net/security_center/static/9696.php · Aviso do Fabricante