1. Home
  2. CVE Database
  3. CVE-2002-1087
MEDIUM · 5.0

CVE-2002-1087

The scripts (1) createdir.php, (2) removedir.php and (3) uploadfile.php for ezContents 1.41 and earlier do not check credentials, which allows remote attackers to create or delete directories and uplo...

Vulnerability Description

The scripts (1) createdir.php, (2) removedir.php and (3) uploadfile.php for ezContents 1.41 and earlier do not check credentials, which allows remote attackers to create or delete directories and upload files via a direct HTTP POST request.

CVSS Score

5.0

MEDIUM

AV:N/AC:L/Au:N/C:N/I:P/A:N
Confidentiality
NONE
Integrity
PARTIAL
Availability
NONE

Affected Products

VendorProductVersions
VisualshapersEzcontents<= 1.41

References

FAQ

What is CVE-2002-1087?

CVE-2002-1087 is a vulnerability with a CVSS score of 5.0 (MEDIUM). The scripts (1) createdir.php, (2) removedir.php and (3) uploadfile.php for ezContents 1.41 and earlier do not check credentials, which allows remote attackers to create or delete directories and uplo...

How severe is CVE-2002-1087?

CVE-2002-1087 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2002-1087?

Check the references section above for vendor advisories and patch information. Affected products include: Visualshapers Ezcontents.