CVE-2002-1647

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2002-12-31 · updated 2026-06-16

Description

The quick login feature in Slash Slashcode does not redirect the user to an alternate URL when the wrong password is provided, which makes it easier for remote web sites to guess the proper passwords by reading the username and password from the Referrer URL.

Affected products

Slashcode.Com Slash: all versions

References

http://marc.info/?l=bugtraq&m=103176636403241&w=2
http://marc.info/?l=bugtraq&m=103177860017930&w=2
http://marc.info/?l=bugtraq&m=103238514720237&w=2
http://www.kb.cert.org/vuls/id/603945
http://marc.info/?l=bugtraq&m=103176636403241&w=2
http://marc.info/?l=bugtraq&m=103177860017930&w=2
http://marc.info/?l=bugtraq&m=103238514720237&w=2
http://www.kb.cert.org/vuls/id/603945

Get alerted when CVE-2002-1647 or the next vulnerability affects your stack