5

CVE-2000-0720

Exploit

EPSS 6.16%
Veröffentlicht 20.10.2000 04:00:00
Zuletzt bearbeitet 16.06.2026 21:52:20
Erkennungen
Login

news.cgi in GWScripts News Publisher does not properly authenticate requests to add an author to the author index, which allows remote attackers to add new authors by directly posting an HTTP request to the new.cgi program with an addAuthor parameter, and setting the Referer to the news.cgi program.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 6

NVD 4 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Gwscripts ≫ Gwscripts News Publisher Version 1.05

Gwscripts ≫ Gwscripts News Publisher Version 1.05a

Gwscripts ≫ Gwscripts News Publisher Version 1.05b

Gwscripts ≫ Gwscripts News Publisher Version 1.06

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	6.16%	0.926

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:P/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://www.securityfocus.com/bid/1621

Vendor Advisory

Exploit

http://www.securityfocus.com/templates/archive.pike?list=1&msg=003301c0123b%2418f8c1a0%24953b29d4%40e8s9s4

https://exchange.xforce.ibmcloud.com/vulnerabilities/5169

https://nvd.nist.gov/vuln/detail/CVE-2000-0720

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2000-0720

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2000-0720

EUVD