CVE-2002-2335

2007-10-2619:00:00

mitre

www.cve.org

killer protection 1.0

vulnerability

vars.inc file

web root

access control

remote attackers

user names

passwords

protection.php

AI Score

6.6

Confidence

Low

EPSS

0.008

Percentile

82.3%

JSON

Killer Protection 1.0 stores the vars.inc include file under the web root with insufficient access control, which allows remote attackers to obtain user names and passwords and log in using protection.php.

References

online.securityfocus.com/archive/1/294208

www.iss.net/security_center/static/10315.php

www.securityfocus.com/bid/5905