7.5
CVSSv2

CVE-2002-0924

Published: 04/10/2002 Updated: 10/09/2008
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

CGIScript.net csNews.cgi allows remote authenticated users to execute arbitrary Perl code via terminating quotes and metacharacters in text fields of the "Advanced Settings" capability.

Vulnerable Product Search on Vulmon Subscribe to Product

cgiscript.net csnews 1.0

cgiscript.net csnews 1.0_professional