CVE-2002-1427

The print_html_to_file function in edit.cgi for Easy Homepage Creator 1.0 does not check user credentials, which allows remote attackers to modify home pages of other users.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2003-04-11

Last modified

2024-08-08

Affected products

• Advanced Easy Homepage Creator (Easy Scripts Archive)
• Easy Homepage Creator (Easy Scripts Archive)

References

• http://archives.neohapsis.com/archives/bugtraq/2002-07/0350.html
• http://www.iss.net/security_center/static/9696.php
• http://www.securityfocus.com/bid/5340