PT-2003-1174 · Unknown · Easy Homepage Creator

Published 2003-03-18 · Updated 2008-09-05 · CVE-2002-1427

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Easy Homepage Creator version 1.0

Description The issue concerns the print html to file function in edit.cgi, which fails to verify user credentials. This allows remote attackers to modify home pages belonging to other users.

Recommendations For Easy Homepage Creator version 1.0, consider disabling the print html to file function in edit.cgi until a patch is available to prevent unauthorized modifications to user home pages.

Exploit

Fix

Related Identifiers

CVE-2002-1427

Affected Products

Easy Homepage Creator

References · 5

• 🔥 https://exploit-db.com/exploits/21658 · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2002-07/0350.html · Exploit
• 🔥 http://securityfocus.com/bid/5340 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-1427 · Security Note
• http://iss.net/security_center/static/9696.php · Vendor Advisory