CVE-2002-1410

Easy Guestbook CGI programs do not authenticate the administrator, which allows remote attackers to (1) delete entries via direct access of admin.cgi, or (2) reconfigure Guestbook via direct access of config.cgi.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2003-04-11

Last modified

2024-08-08

Affected products

• Ben Chivers Guestbook (Ben Chivers)
• Easy Guestbook (Easy Scripts Archive)

References

• http://archives.neohapsis.com/archives/bugtraq/2002-07/0356.html
• http://www.iss.net/security_center/static/9697.php
• http://www.securityfocus.com/bid/5341