5
CVE-2000-0720
- EPSS 3.64%
- Veröffentlicht 20.10.2000 04:00:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
Loginnews.cgi in GWScripts News Publisher does not properly authenticate requests to add an author to the author index, which allows remote attackers to add new authors by directly posting an HTTP request to the new.cgi program with an addAuthor parameter, and setting the Referer to the news.cgi program.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gwscripts ≫ Gwscripts News Publisher Version1.05
Gwscripts ≫ Gwscripts News Publisher Version1.05a
Gwscripts ≫ Gwscripts News Publisher Version1.05b
Gwscripts ≫ Gwscripts News Publisher Version1.06
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 3.64% | 0.867 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:P/A:N
|