CVEvulnerability
CVE-2002-2335
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2002-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-16
Description
Killer Protection 1.0 stores the vars.inc include file under the web root with insufficient access control, which allows remote attackers to obtain user names and passwords and log in using protection.php.
Affected configurations
• john drake killer protection 1.0
Related
Weakness · not in database (1)
References
- http://online.securityfocus.com/archive/1/294208 online.securityfocus.com
- http://www.iss.net/security_center/static/10315.php www.iss.net
- http://www.securityfocus.com/bid/5905 www.securityfocus.com
- http://online.securityfocus.com/archive/1/294208 online.securityfocus.com
- http://www.iss.net/security_center/static/10315.php www.iss.net
- http://www.securityfocus.com/bid/5905 www.securityfocus.com