CVE-2002-1449

CVE-2002-1449 describes a critical vulnerability in frederic_tyndiuk eUpload 1.0, where the password.txt file is stored in plaintext within the web document root. This allows unauthenticated remote attackers to read sensitive credentials and potentially overwrite arbitrary files, leading to significant compromise. The vulnerability carries a CVSS score of 7.5, indicating high severity with network-based attacks and low complexity, enabling partial confidentiality, integrity, and availability impact. While there is no evidence of active exploitation or public exploit code, the vulnerability has garnered notable community discussion, suggesting awareness among security researchers.