cbcvebase.
CVE-2002-1087
published 2002-10-04

CVE-2002-1087: The scripts (1) createdir.php, (2) removedir.php and (3) uploadfile.php for ezContents 1.41 and earlier do not check credentials, which allows remote attackers…

PriorityP421medium5CVSS 2.0
AVNACLAuNCNIPAN
EPSS
1.67%
73.9th percentile
The scripts (1) createdir.php, (2) removedir.php and (3) uploadfile.php for ezContents 1.41 and earlier do not check credentials, which allows remote attackers to create or delete directories and upload files via a direct HTTP POST request.

Affected

1 ranges
VendorProductVersion rangeFixed in
visualshapersezcontents<= 1.41—
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.