high7.5Public exploit code
CVE-2002-1427
The print_html_to_file function in edit.cgi for Easy Homepage Creator 1.0 does not check user credentials, which allows remote attackers to modify home pages o…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Ben Chivers Easy Homepage Creator 1.0 - File Modification2002-07-29 · webapps · cgi · Verified
Impact
The print_html_to_file function in edit.cgi for Easy Homepage Creator 1.0 does not check user credentials, which allows remote attackers to modify home pages of other users.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Easy Scripts Archive | Advanced Easy Homepage Creator | Version 1.0 |
| Easy Scripts Archive | Easy Homepage Creator | Version 1.0 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2002-07/0350.html
- http://www.iss.net/security_center/static/9696.php
- http://www.securityfocus.com/bid/5340
- http://archives.neohapsis.com/archives/bugtraq/2002-07/0350.html
- http://www.iss.net/security_center/static/9696.php
- http://www.securityfocus.com/bid/5340