CVE-2002-0922 in CGIScript.net csNews
Summary
CGIScript.net csNews.cgi allows remote attackers to obtain database files via a direct URL-encoded request to (1) default%2edb or (2) default%2edb.style, or remote authenticated users to perform administrative actions via (3) a database parameter set to default%2edb.
Disclosure
10/04/2002
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 18859 | CGIScript.net csNews Encoded URL csNews.cgi File information disclosure | 200 | Proof-of-Concept | Not defined | CVE-2002-0922 |