CVE-2002-0924 in csNews
Сводка (Английский)
CGIScript.net csNews.cgi allows remote authenticated users to execute arbitrary Perl code via terminating quotes and metacharacters in text fields of the "Advanced Settings" capability.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Раскрытие
04.10.2002
Статус
Подтверждённый
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 18861 | CGIScript.net csNews Advanced Settings csNews.cgi эскалация привилегий | 269 | Не определено | Не определено | CVE-2002-0924 |