CVE-2002-1462 details2.php in OrganicPHP PHP-affiliate 1.0, and possibly later versions, allows remote attackers to modify information of other users by modifying certain hidden form fields.
MediumCVSS 5.0
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
details2.php in OrganicPHP PHP-affiliate 1.0, and possibly later versions, allows remote attackers to modify information of other users by modifying certain hidden form fields.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| organicphp php-affiliate | = 1.0 | No fix listed |
| organicphp php-affiliate | = 1.1 | No fix listed |
References
- 20020815 Input validation attack in php-affiliate-v1.0 mailing-list vendor-advisory
- phpaffiliate-details-account-access(9858) vdb-entry vendor-advisory
- 5482 patch vdb-entry vendor-advisory