CVE-2002-0537 The admin.html file in StepWeb Search Engine (SWS) 2.5 stores passwords in links to manager.pl, which allows remote attackers who can access the admin.html file to gain administrative privileges to SW...
HighCVSS 10.0
EPSS 3.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The admin.html file in StepWeb Search Engine (SWS) 2.5 stores passwords in links to manager.pl, which allows remote attackers who can access the admin.html file to gain administrative privileges to SWS.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| stepweb sws | = 2.5 | No fix listed |
References
- 20020411 SWS Vuln (small but important to those using it.) exploit mailing-list patch vendor-advisory
- sws-insecure-admin-page(8849) vdb-entry vendor-advisory
- 4503 patch vdb-entry vendor-advisory