CVE-2002-0924

CGIScript.net csNews.cgi allows remote authenticated users to execute arbitrary Perl code via terminating quotes and metacharacters in text fields of the "Advanced Settings" capability.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2002-10-04

Last modified

2024-08-08

Affected products

• Csnews (Cgiscript.net)

References

• http://archives.neohapsis.com/archives/bugtraq/2002-06/0091.html
• http://www.securityfocus.com/bid/4451