7.5
CVE-2002-0923
- EPSS 6.98%
- Veröffentlicht 04.10.2002 04:00:00
- Zuletzt bearbeitet 16.06.2026 21:58:23
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginCGIScript.net csNews.cgi allows remote authenticated users to read arbitrary files, and possibly gain privileges, via the (1) pheader or (2) pfooter parameters in the "Advanced Settings" capability.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cgiscript.Net ≫ Csnews Version1.0
Cgiscript.Net ≫ Csnews Version1.0_professional
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 6.98% | 0.933 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://archives.neohapsis.com/archives/bugtraq/2002-06/0091.html
http://www.iss.net/security_center/static/9333.php
http://www.securityfocus.com/bid/4994