CVE-2002-0923 CGIScript.net csNews.cgi allows remote authenticated users to read arbitrary files, and possibly gain privileges, via the (1) pheader or (2) pfooter parameters in the "Advanced Settings" capability.
HighCVSS 7.5
EPSS 7.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
CGIScript.net csNews.cgi allows remote authenticated users to read arbitrary files, and possibly gain privileges, via the (1) pheader or (2) pfooter parameters in the "Advanced Settings" capability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cgiscript.net csnews | = 1.0 | No fix listed |
| cgiscript.net csnews | = 1.0_professional | No fix listed |
References
- 20020611 CGIscript.net - csNews.cgi - Multiple Vulnerabilities mailing-list
- cgiscript-csnews-admin-access(9333) vdb-entry vendor-advisory
- 4994 exploit vdb-entry vendor-advisory