Unscored CVE-2002-1087 EUVD-2002-1075GHSA-v36f-2j5h-687h

The scripts (1) createdir.php, (2) removedir.php and (3) uploadfile.php for ezContents 1.41 and earlier do not check credentials, which all…

Published Aug 31, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

The scripts (1) createdir.php, (2) removedir.php and (3) uploadfile.php for ezContents 1.41 and earlier do not check credentials, which allows remote attackers to create or delete directories and upload files via a direct HTTP POST request.

References

20020725 ezContents multiple vulnerabilities mailing-list
20020725 [VulnWatch] ezContents multiple vulnerabilities mailing-list