Lucene search
HistoryOct 20, 2000 - 4:00 a.m.
CVE-2000-0688
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.9
Confidence
Low
EPSS
0.024
Percentile
90.0%
Subscribe Me LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the subscribe.pl script with the setpwd parameter.
Affected configurations
Node
cgi_script_centersubscribe_me_liteMatch2.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cgi_script_center | subscribe_me_lite | 2.0 | cpe:2.3:a:cgi_script_center:subscribe_me_lite:2.0:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2000-0688
2000-10-20 04:00:00
exploitdb
exploitdb
cvelist
cvelist
CVE-2000-0688
2000-09-21 04:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.9
Confidence
Low
EPSS
0.024
Percentile
90.0%
Related for NVD:CVE-2000-0688