Unscored CVE-2002-1084 EUVD-2002-1072GHSA-fp4x-v3cc-mrv6

The VerifyLogin function in ezContents 1.41 and earlier does not properly halt program execution if a user fails to log in properly, which …

Published Aug 31, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

The VerifyLogin function in ezContents 1.41 and earlier does not properly halt program execution if a user fails to log in properly, which allows remote attackers to modify and view restricted information via HTTP POST requests.

References

20020725 ezContents multiple vulnerabilities mailing-list
20020725 [VulnWatch] ezContents multiple vulnerabilities mailing-list
ezcontents-verifylogin-post-data(9711) vdb-entry