6.5 Medium
AI Score
Confidence
Low
0.024 Low
EPSS
Percentile
90.0%
CGIScript.net csNews.cgi allows remote authenticated users to read arbitrary files, and possibly gain privileges, via the (1) pheader or (2) pfooter parameters in the βAdvanced Settingsβ capability.
archives.neohapsis.com/archives/bugtraq/2002-06/0091.html
www.iss.net/security_center/static/9333.php
www.securityfocus.com/bid/4994