CVE-2002-0919

CGIScript.net csPassword.cgi allows remote authenticated users to modify the .htaccess file and gain privileges via newlines in the title field of the edit page.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2002-10-04

Last modified

2024-08-08

Affected products

• Cspassword (Cgiscript.net)

References

• http://online.securityfocus.com/archive/1/274727
• http://www.iss.net/security_center/static/9222.php
• http://www.securityfocus.com/bid/4888