5
CVE-2000-0720
- EPSS 3.64%
- Veröffentlicht 20.10.2000 04:00:00
- Zuletzt bearbeitet 16.04.2026 00:27:16
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
Loginnews.cgi in GWScripts News Publisher does not properly authenticate requests to add an author to the author index, which allows remote attackers to add new authors by directly posting an HTTP request to the new.cgi program with an addAuthor parameter, and setting the Referer to the news.cgi program.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gwscripts ≫ Gwscripts News Publisher Version1.05
Gwscripts ≫ Gwscripts News Publisher Version1.05a
Gwscripts ≫ Gwscripts News Publisher Version1.05b
Gwscripts ≫ Gwscripts News Publisher Version1.06
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 3.64% | 0.867 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:P/A:N
|