← Vulnerability feed

Vulnerability record · CVE-2002-1085 · published 4 October 2002

CVE-2002-1085: Visualshapers ezcontents vulnerability

Visualshapers · Ezcontents

Multiple cross-site scripting vulnerabilities in ezContents 1.41 and earlier allow remote attackers to execute script and steal cookies via the diary and other capabilities.

7.5 CVSS 2.0 High EPSS 2.5% · top 16.0%
7.5CVSS 2.0 base score
2.5%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References
16 Jun 2026Last modified by NVD

Description

Multiple cross-site scripting vulnerabilities in ezContents 1.41 and earlier allow remote attackers to execute script and steal cookies via the diary and other capabilities.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0040.html
http://online.securityfocus.com/archive/1/284229
http://www.iss.net/security_center/static/9712.php Vendor Advisory
http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0040.html
http://online.securityfocus.com/archive/1/284229
http://www.iss.net/security_center/static/9712.php Vendor Advisory

Track CVE-2002-1085 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2008-2135Visualshapers ezcontents sql injection vulnerabilityMultiple SQL injection vulnerabilities in VisualShapers ezContents 2.0.0 allow remote attackers to execute arbitrary SQL commands via the (1) content…EPSS 1.00%7.5CVE-2006-4477Visualshapers ezcontents vulnerabilityMultiple PHP remote file inclusion vulnerabilities in Visual Shapers ezContents 2.0.3 allow remote attackers to execute arbitrary PHP code via an emp…EPSS 8.0%7.5CVE-2006-4478Visualshapers ezcontents vulnerabilitySQL injection vulnerability in headeruserdata.php in Visual Shapers ezContents 2.0.3 allows remote attackers to execute arbitrary SQL commands via th…EPSS 1.8%7.5CVE-2004-0132Visualshapers ezcontents vulnerabilityMultiple PHP remote file inclusion vulnerabilities in ezContents 2.0.2 and earlier allow remote attackers to execute arbitrary PHP code from a remote…EPSS 2.4%7.5CVE-2004-0070Visualshapers ezcontents vulnerabilityPHP remote file inclusion vulnerability in module.php for ezContents allows remote attackers to execute arbitrary PHP code by modifying the link para…EPSS 3.0%7.5CVE-2003-1214Visualshapers ezcontents vulnerabilityUnknown vulnerability in the server login for VisualShapers ezContents 2.02 and earlier allows remote attackers to bypass access restrictions and gai…EPSS 1.8%7.5CVE-2002-1086Visualshapers ezcontents vulnerabilityMultiple SQL injection vulnerabilities in ezContents 1.41 and earlier allow remote attackers to conduct unauthorized activities.EPSS 1.9%6.4CVE-2002-1084Visualshapers ezcontents vulnerabilityThe VerifyLogin function in ezContents 1.41 and earlier does not properly halt program execution if a user fails to log in properly, which allows rem…EPSS 2.6%

Source: NIST National Vulnerability Database (record CVE-2002-1085), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.