Vulnerability-Lookup

FKIE_CVE-2003-1214

Vulnerability from fkie_nvd - Published: 2004-02-11 05:00 - Updated: 2025-04-03 01:03

Severity ?

Summary

Unknown vulnerability in the server login for VisualShapers ezContents 2.02 and earlier allows remote attackers to bypass access restrictions and gain access to restricted functions.

References

URL	Tags
cve@mitre.org	http://secunia.com/advisories/10839	Exploit, Patch
cve@mitre.org	http://www.ezcontents.org/forum/viewtopic.php?t=361	Patch
cve@mitre.org	https://exchange.xforce.ibmcloud.com/vulnerabilities/15136
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/10839	Exploit, Patch
af854a3a-2127-422b-91ae-364da2661108	http://www.ezcontents.org/forum/viewtopic.php?t=361	Patch
af854a3a-2127-422b-91ae-364da2661108	https://exchange.xforce.ibmcloud.com/vulnerabilities/15136

Impacted products

Vendor	Product	Version
visualshapers	ezcontents	1.40
visualshapers	ezcontents	1.41
visualshapers	ezcontents	1.42
visualshapers	ezcontents	1.43
visualshapers	ezcontents	1.44
visualshapers	ezcontents	1.45
visualshapers	ezcontents	1.45b
visualshapers	ezcontents	2.0.1
visualshapers	ezcontents	2.0.2
visualshapers	ezcontents	2.0_rc1
visualshapers	ezcontents	2.0_rc2
visualshapers	ezcontents	2.0_rc3

JSON

To clipboard Create KEV Entry

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:visualshapers:ezcontents:1.40:*:*:*:*:*:*:*",
              "matchCriteriaId": "34986CA0-5D4E-44D6-849D-5CBD2820B5B6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:visualshapers:ezcontents:1.41:*:*:*:*:*:*:*",
              "matchCriteriaId": "8F7F91E9-7863-44A5-AAAA-94907D0F663E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:visualshapers:ezcontents:1.42:*:*:*:*:*:*:*",
              "matchCriteriaId": "BA801A12-208E-46CA-9383-C2DA34A80F43",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:visualshapers:ezcontents:1.43:*:*:*:*:*:*:*",
              "matchCriteriaId": "FAB18C7A-9D55-4EA4-B99D-7D7186B467C4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:visualshapers:ezcontents:1.44:*:*:*:*:*:*:*",
              "matchCriteriaId": "E26C0400-4845-44A3-9148-4B50F8F3D683",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:visualshapers:ezcontents:1.45:*:*:*:*:*:*:*",
              "matchCriteriaId": "262D91DB-DED7-42D4-801A-F51FDB4E01EB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:visualshapers:ezcontents:1.45b:*:*:*:*:*:*:*",
              "matchCriteriaId": "41C51865-7F1F-4F8A-9F83-8DF13A9B4BB6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:visualshapers:ezcontents:2.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "28F49C85-8B17-4C92-8E35-E85FCF7D3505",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:visualshapers:ezcontents:2.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "3FBB7052-B779-4D85-B639-45DB66407F24",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:visualshapers:ezcontents:2.0_rc1:*:*:*:*:*:*:*",
              "matchCriteriaId": "E37437DA-042E-4CAD-BA11-108614D8B482",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:visualshapers:ezcontents:2.0_rc2:*:*:*:*:*:*:*",
              "matchCriteriaId": "2DF24859-8646-41ED-9EF9-A7B4EA5EE9D2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:visualshapers:ezcontents:2.0_rc3:*:*:*:*:*:*:*",
              "matchCriteriaId": "C9407F37-8477-4B05-99C5-4ADD24A33F9F",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unknown vulnerability in the server login for VisualShapers ezContents 2.02 and earlier allows remote attackers to bypass access restrictions and gain access to restricted functions."
    }
  ],
  "id": "CVE-2003-1214",
  "lastModified": "2025-04-03T01:03:51.193",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": true,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2004-02-11T05:00:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit",
        "Patch"
      ],
      "url": "http://secunia.com/advisories/10839"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "http://www.ezcontents.org/forum/viewtopic.php?t=361"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15136"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Patch"
      ],
      "url": "http://secunia.com/advisories/10839"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://www.ezcontents.org/forum/viewtopic.php?t=361"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15136"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

CVE-2003-1214 (GCVE-0-2003-1214)

Vulnerability from cvelistv5 – Published: 2005-05-19 04:00 – Updated: 2024-08-08 02:19

Summary

Unknown vulnerability in the server login for VisualShapers ezContents 2.02 and earlier allows remote attackers to bypass access restrictions and gain access to restricted functions.

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://secunia.com/advisories/10839	third-party-advisoryx_refsource_SECUNIA
	http://www.ezcontents.org/forum/viewtopic.php?t=361	x_refsource_CONFIRM
	https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF

Show details on NVD website

JSON

To clipboard Create KEV Entry

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-08T02:19:46.023Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "10839",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/10839"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.ezcontents.org/forum/viewtopic.php?t=361"
          },
          {
            "name": "ezcontents-login-bypass(15136)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15136"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2003-10-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unknown vulnerability in the server login for VisualShapers ezContents 2.02 and earlier allows remote attackers to bypass access restrictions and gain access to restricted functions."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-07-10T14:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "10839",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/10839"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.ezcontents.org/forum/viewtopic.php?t=361"
        },
        {
          "name": "ezcontents-login-bypass(15136)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15136"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2003-1214",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unknown vulnerability in the server login for VisualShapers ezContents 2.02 and earlier allows remote attackers to bypass access restrictions and gain access to restricted functions."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "10839",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/10839"
            },
            {
              "name": "http://www.ezcontents.org/forum/viewtopic.php?t=361",
              "refsource": "CONFIRM",
              "url": "http://www.ezcontents.org/forum/viewtopic.php?t=361"
            },
            {
              "name": "ezcontents-login-bypass(15136)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15136"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2003-1214",
    "datePublished": "2005-05-19T04:00:00",
    "dateReserved": "2005-05-19T00:00:00",
    "dateUpdated": "2024-08-08T02:19:46.023Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

FKIE_CVE-2003-1214

CVE-2003-1214 (GCVE-0-2003-1214)

Tags

Sightings

Nomenclature