CVE-2002-1449

eUpload 1.0 stores the password.txt password file in plaintext under the web document root, which allows remote attackers to overwrite arbitrary files by reading password.txt.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2002-07-31

Last modified

2024-08-08

Affected products

• Eupload (Frederic Tyndiuk)

References

• http://archives.neohapsis.com/archives/bugtraq/2002-07/0412.html
• http://www.iss.net/security_center/static/9733.php
• http://www.securityfocus.com/bid/5369