Security Advisory

CVE-2002-1087

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2002-08-31 04:00:00

Last updated 2024-08-08 03:12:17

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The scripts (1) createdir.php, (2) removedir.php and (3) uploadfile.php for ezContents 1.41 and earlier do not check credentials, which allows remote attackers to create or delete directories and upload files via a direct HTTP POST request.

← Browse all CVEs View on cve.org ↗