Lucene search

MitreCVE-2002-1462

HistoryJun 09, 2003 - 4:00 a.m.

CVE-2002-1462

2003-06-0904:00:00

mitre

web.nvd.nist.gov

cve-2002-1462

organicphp

php-affiliate

remote attackers

information modification

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.9

Confidence

Low

EPSS

0.004

Percentile

72.4%

JSON

details2.php in OrganicPHP PHP-affiliate 1.0, and possibly later versions, allows remote attackers to modify information of other users by modifying certain hidden form fields.

Affected configurations

Nvd

Node

organicphpphp-affiliateMatch1.0

organicphpphp-affiliateMatch1.1

VendorProductVersionCPE
organicphpphp-affiliate1.0cpe:2.3:a:organicphp:php-affiliate:1.0:*:*:*:*:*:*:*
organicphpphp-affiliate1.1cpe:2.3:a:organicphp:php-affiliate:1.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
organicphp	php-affiliate	1.0	cpe:2.3:a:organicphp:php-affiliate:1.0:::::::*
organicphp	php-affiliate	1.1	cpe:2.3:a:organicphp:php-affiliate:1.1:::::::*

References

archives.neohapsis.com/archives/bugtraq/2002-08/0141.html

www.iss.net/security_center/static/9858.php

www.securityfocus.com/bid/5482

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.9

Confidence

Low

EPSS

0.004

Percentile

72.4%

JSON

Related for CVE-2002-1462