CVE-2002-1647 - CVE House
Back to Database
Status published Medium CVE-2002-1647

The quick login feature in Slash Slashcode does not redirect...

Vulnerability Description

The quick login feature in Slash Slashcode does not redirect the user to an alternate URL when the wrong password is provided, which makes it easier for remote web sites to guess the proper passwords by reading the username and password from the Referrer URL.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2002-1647

Credits & Attribution

No credits recorded in the NVD database.

References

More from slashcode.com

View All →
CVE-2008-2553
Cross-site scripting (XSS) vulnerability in Slashdot Like Automated Storytelling Homepage...
Medium 4.3
CVE-2008-2231
SQL injection vulnerability in Slashdot Like Automated Storytelling Homepage (Slash)...
High 7.5

Affected Vendor

slashcode.com

View all reports →

Affected Software

slash
Vulnerable Versions:
Unknown

Timeline

Official Publish: March 28th, 2005
Last Modified: August 8th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.