CVE-2002-0495

Опубликовано: 12 авг. 2002

Источник: nvd

CVSS2: 10

EPSS Средний

Описание

csSearch.cgi in csSearch 2.3 and earlier allows remote attackers to execute arbitrary Perl code via the savesetup command and the setup parameter, which overwrites the setup.cgi configuration file that is loaded by csSearch.cgi.

Ссылки

http://www.cgiscript.net/cgi-script/csNews/csNews.cgi?database=cgi.db&command=viewone&id=7
Product
http://www.iss.net/security_center/static/8636.php
Broken Link
Patch
Vendor Advisory
http://www.securityfocus.com/archive/1/264169
Broken Link
Third Party Advisory
VDB Entry
Vendor Advisory
http://www.securityfocus.com/bid/4368
Broken Link
Exploit
Patch
Third Party Advisory
VDB Entry
Vendor Advisory
http://www.cgiscript.net/cgi-script/csNews/csNews.cgi?database=cgi.db&command=viewone&id=7
Product
http://www.iss.net/security_center/static/8636.php
Broken Link
Patch
Vendor Advisory
http://www.securityfocus.com/archive/1/264169
Broken Link
Third Party Advisory
VDB Entry
Vendor Advisory
http://www.securityfocus.com/bid/4368
Broken Link
Exploit
Patch
Third Party Advisory
VDB Entry
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:cgiscript:cssearch_professional:*:*:*:*:*:*:*:*

Версия до 2.3 (включая)

EPSS

Процентиль: 94%

0.15154

Средний

10 Critical

CVSS2

Дефекты

CWE-94

Связанные уязвимости

GHSA-j2g6-hqhg-776g

github

почти 4 года назад