Vulnerability Details CVE-2002-1087
The scripts (1) createdir.php, (2) removedir.php and (3) uploadfile.php for ezContents 1.41 and earlier do not check credentials, which allows remote attackers to create or delete directories and upload files via a direct HTTP POST request.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.017
EPSS Ranking 73.8%
CVSS Severity
CVSS v2 Score 5.0
References
Products affected by CVE-2002-1087
-
cpe:2.3:a:visualshapers:ezcontents:*