Vulnerabilities > CVE-2002-1449 - Unspecified vulnerability in Frederic Tyndiuk Eupload 1.0
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
eUpload 1.0 stores the password.txt password file in plaintext under the web document root, which allows remote attackers to overwrite arbitrary files by reading password.txt.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |