CVE-2002-0923 in CGIScript.net csNews
Summary
CGIScript.net csNews.cgi allows remote authenticated users to read arbitrary files, and possibly gain privileges, via the (1) pheader or (2) pfooter parameters in the "Advanced Settings" capability.
Disclosure
10/04/2002
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 18860 | CGIScript.net csNews Advanced Settings csNews.cgi File information disclosure | 200 | Proof-of-Concept | Not defined | CVE-2002-0923 |