CVE-2002-0537

The admin.html file in StepWeb Search Engine (SWS) 2.5 stores passwords in links to manager.pl, which allows remote attackers who can access the admin.html file to gain administrative privileges to SWS.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2002-07-03

Last modified

2024-08-08

Affected products

• Sws (Stepweb)

References

• http://archives.neohapsis.com/archives/bugtraq/2002-04/0148.html
• http://www.iss.net/security_center/static/8849.php
• http://www.securityfocus.com/bid/4503