PT-2002-2303 · Ezupload · Eupload

Published 2002-07-31 · Updated 2008-09-10 · CVE-2002-1449

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions eUpload version 1.0

Description The issue allows remote attackers to read a password file stored in plaintext under the web document root, which can then be used to overwrite arbitrary files.

Recommendations For eUpload version 1.0, consider restricting access to the password.txt file or storing it outside the web document root to prevent unauthorized access. As a temporary workaround, restrict write access to sensitive files and directories until a more secure password storage method is implemented.

Exploit

Fix

Related Identifiers

CVE-2002-1449

Affected Products

Eupload

References · 4

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2002-07/0412.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-1449 · Security Note
• http://securityfocus.com/bid/5369 · Note
• http://iss.net/security_center/static/9733.php · Note