CVE-2002-1647
Last modified
CVE-2002-1647 is a vulnerability of currently unknown severity. The quick login feature in Slash Slashcode does not redirect the user to an alternate URL when the wrong password is provided, which makes it easier for remote web sites to guess the proper passwords by reading the username and password from the Referrer URL.. EPSS estimates a 1.53% chance of exploitation in the next 30 days.
Description
The quick login feature in Slash Slashcode does not redirect the user to an alternate URL when the wrong password is provided, which makes it easier for remote web sites to guess the proper passwords by reading the username and password from the Referrer URL.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Slashcode.Com | Slash | All versions |
References
- http://www.kb.cert.org/vuls/id/603945US Government Resource
- http://www.kb.cert.org/vuls/id/603945US Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2002-1647?
How severe is CVE-2002-1647?
How do I fix CVE-2002-1647?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2002
- CVE-2002-1641Multiple buffer overflows in Oracle Web Cache for Oracle 9i …
- CVE-2002-1642PostgreSQL 7.2.1 and 7.2.2 allows local users to delete tran…
- CVE-2002-1643Multiple buffer overflows in RealNetworks Helix Universal Se…
- CVE-2002-1644SSH Secure Shell for Servers and SSH Secure Shell for Workst…
- CVE-2002-1645Buffer overflow in the URL catcher feature for SSH Secure Sh…
- CVE-2002-1646SSH Secure Shell for Servers 3.0.0 to 3.1.1 allows remote at…
- CVE-2002-1648Cross-site request forgery (CSRF) vulnerability in compose.p…
- CVE-2002-1649Cross-site scripting (XSS) vulnerability in read_body.php in…
- CVE-2002-1650The spell checker plugin (check_me.mod.php) for SquirrelMail…
- CVE-2002-1651Cross-site scripting (XSS) vulnerability in Verity Search97 …
- CVE-2002-1652Buffer overflow in cgicso.c for cgiemail 1.6 allows remote a…
- CVE-2002-1653Farm9 Cryptcat, when started in server mode with the -e opti…
Are you affected by CVE-2002-1647?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST