CVE:CVE-2002-1427
CNNVD:CNNVD-200304-110
Easy Homepage Creator 1.0版本中edit.cgi的print_html_to_file函数不能检查用户凭证。远程攻击者可以利用该漏洞修改其他用户主页。
solution:Upgrade easy_scripts_archive advanced_easy_homepage_creator to a higher version than 1.0,and avoid the version 1.0; Upgrade easy_scripts_archive easy_homepage_creator to a higher version than 1.0,and avoid the version 1.0