Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 04/10/2002 Updated: 05/09/2008

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 505

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

CGIScript.net csPassword.cgi leaks sensitive information such as the pathname of the server in debug messages that are presented when the script fails, which allows remote malicious users to obtain the information via a "remove" option in the command parameter, which generates an error.

Vulnerable Product	Search on Vulmon	Subscribe to Product
cgiscript.net cspassword 1.0

source: wwwsecurityfocuscom/bid/4887/info CGIScriptnet provides various webmaster related tools and is maintained by Mike Barone and Andy Angrick A vulnerability has been reported in the csPasswordcgi script developed by CGIScriptnet that discloses potentially sensitive information to a user When an error occurs with the csPassword ...

NVD-CWE-Other http://www.iss.net/security_center/static/9221.php http://www.securityfocus.com/bid/4887 http://online.securityfocus.com/archive/1/274727 https://nvd.nist.gov https://www.exploit-db.com/exploits/21494/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2002-0918

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect