CVE-2002-1087

The scripts (1) createdir.php, (2) removedir.php and (3) uploadfile.php for ezContents 1.41 and earlier do not check credentials, which allows remote attackers…

published August 31, 2002

CVSS
—
EPSS
2%
Percentile
76.5
In the wild
Unconfirmed
What it is

The scripts (1) createdir.php, (2) removedir.php and (3) uploadfile.php for ezContents 1.41 and earlier do not check credentials, which allows remote attackers to create or delete directories and upload files via a direct HTTP POST request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01673 · 76.5th percentile
Published
2002-08-31T04:00Z
EPSS history
Timeline
  • 31 AUG 04:00Z
    The scripts (1) createdir.php, (2) removedir.php and (3) uploadfile.php for ezContents 1.41 and earlier do not check credentials, which allows remote attackers…
    cvelistv5