Cgiscript.net

Records14All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

Cgiscript.net records in CISA KEV

No Cgiscript.net vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Csmailto 4 records MEDIUM Csnews 4 records MEDIUM Cspassword 4 records LOW Csfaq 1 record LOW Cslivesupport 1 record LOW

Records

4 records in Csnews · all components

TI-2002-00896 CVE-2002-0923 · GHSA-jqqf-676c-jm28

CGIScript.net csNews.cgi allows remote authenticated users to read arbitrary files, and…

MEDIUM 43

CGIScript.net csNews.cgi allows remote authenticated users to read arbitrary files, and possibly gain privileges, via the (1) pheader or (2) pfooter parameters in the "Advanced Settings" capability.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.06978 Published 2002-08-31 No fix listed

TI-2002-00897 CVE-2002-0924 · GHSA-v82c-52pg-fhqg

CGIScript.net csNews.cgi allows remote authenticated users to execute arbitrary Perl code…

LOW 36

CGIScript.net csNews.cgi allows remote authenticated users to execute arbitrary Perl code via terminating quotes and metacharacters in text fields of the "Advanced Settings" capability.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01387 Published 2002-08-31 No fix listed

TI-2002-00895 CVE-2002-0922 · GHSA-h729-m8mr-5h5f

CGIScript.net csNews.cgi allows remote attackers to obtain database files via a direct…

LOW 29

CGIScript.net csNews.cgi allows remote attackers to obtain database files via a direct URL-encoded request to (1) default%2edb or (2) default%2edb.style, or remote authenticated users to perform administrative actions vi…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03236 Published 2002-08-31 No fix listed

TI-2002-00894 CVE-2002-0921 · GHSA-m68v-x33f-2vxv

CGIScript.net csNews.cgi allows remote attackers to obtain potentially sensitive…

LOW 25

CGIScript.net csNews.cgi allows remote attackers to obtain potentially sensitive information, such as the full server pathname and other configuration settings, via the viewnews command with an invalid database, which le…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01309 Published 2002-08-31 No fix listed

Open these records in search →

Critical	0
High	6
Medium	8
Low	0
No CVSS	0