7.5

CVE-2000-0689

Exploit
Account Manager LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the amadmin.pl script with the setpasswd parameter.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cgi Script Center ≫ Account Manager Versionlite_1.0
Cgi Script Center ≫ Account Manager Versionpro_1.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 7.81% 0.939
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://archives.neohapsis.com/archives/bugtraq/2000-08/0291.html
Vendor Advisory
Exploit
http://www.cgiscriptcenter.com/acctlite/
http://www.osvdb.org/13341
http://www.securityfocus.com/bid/1604
Patch
Vendor Advisory
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/5125