Unscored CVE-2002-1083 EUVD-2002-1071GHSA-6vrr-4rgh-cr8p

Directory traversal vulnerabilities in ezContents 1.41 and earlier allow remote attackers to cause ezContents to (1) create directories usi…

Published Aug 31, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

Directory traversal vulnerabilities in ezContents 1.41 and earlier allow remote attackers to cause ezContents to (1) create directories using the Maintain Images:Add New:Create Subdirectory item, or (2) list directories using the Maintain Images file listing, via .. (dot dot) sequences.

References

20020725 ezContents multiple vulnerabilities mailing-list
20020725 [VulnWatch] ezContents multiple vulnerabilities mailing-list
ezcontents-dotdot-directory-traversal(9710) vdb-entry