CVE-2002-0924 CGIScript.net csNews.cgi allows remote authenticated users to execute arbitrary Perl code via terminating quotes and metacharacters in text fields of the "Advanced Settings" capability.
HighCVSS 7.5
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
CGIScript.net csNews.cgi allows remote authenticated users to execute arbitrary Perl code via terminating quotes and metacharacters in text fields of the "Advanced Settings" capability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cgiscript.net csnews | = 1.0 | No fix listed |
| cgiscript.net csnews | = 1.0_professional | No fix listed |
References
- 20020611 CGIscript.net - csNews.cgi - Multiple Vulnerabilities mailing-list
- 4451 vdb-entry