CVE-2002-1752

CVE-2002-1752 ffects CGIScript.net csChat-R-Box. csChatRBox.cgi processes the setup parameter with Perl’s eval, enabling remote attackers to execute arbitrary code. The vulnerability is confirmed across multiple sources (NVD/CVE entries; PT-Security advisory) and is described as a remote code exe...

CVE-2002-0918

CGIScript.net csPassword.cgi leaks sensitive information such as the pathname of the server in debug messages that are presented when the script fails, which allows remote attackers to obtain the information via a "remove" option in the command parameter, which generates an error...

CVE-2002-0920

The CVE-2002-0920 entry describes a vulnerability in CGIScript.net csPassword.cgi where usernames and unencrypted passwords are written to the temporary file password.cgi.tmp during data modification. The underlying issue is that sensitive credentials are stored in a world-readable/accessible tem...

CVE-2002-0924

CVE-2002-0924 affects CGIScript.net’s csNews.cgi. The vulnerability allows remote authenticated users to execute arbitrary Perl code by injecting terminating quotes and metacharacters into text fields under the “Advanced Settings” capability. The CVSS metrics in the provided document indicate net...

CVE-2002-0920

CGIScript.net csPassword.cgi stores usernames and unencrypted passwords in the password.cgi.tmp temporary file while modifying data, which could allow local users and possibly remote attackers to gain privileges by stealing the file before it has been processed...

CVE-2002-0922

The CVE-2002-0922 issue affects the CGIScript.net csNews.cgi CGI script. It allows remote attackers to obtain database files (default.db and default.db.style) via direct URL-encoded requests, and also permits remote authenticated users to perform administrative actions when a database parameter i...

CVE-2002-0918

The vulnerability CVE-2002-0918 affects CGIScript.net csPassword.cgi. The root cause is leakage of the server pathname via debug messages generated on script failure, which can be triggered through a remote attacker using a remove option in the command parameter to cause an error. Impact is expos...

CVE-2002-0917

CGIScript.net csPassword.cgi stores .htpasswd files under the web document root, which could allow remote authenticated users to download the file and crack the passwords of other users...

CVE-2002-0923

CVE-2002-0923 affects CGIScript.net csNews.cgi. Multiple OpenVAS/Nessus/NVD records indicate that some csNews.cgi deployments are vulnerable to remote access via the Advanced Settings parameters (pheader, pfooter), enabling reading of arbitrary files and potentially elevating privileges. The vuln...

CVE-2002-0919

CGIScript.net csPassword.cgi allows remote authenticated users to modify the .htaccess file and gain privileges via newlines in the title field of the edit page...

CVE-2002-0921

The CVE-2002-0921 vulnerability affects CGIScript.net csNews.cgi, where the viewnews command against an invalid database may cause error messages to reveal sensitive information such as the full server pathname and configuration settings. The available sources (NVD/CVE entries) describe the infor...

CVE-2002-0919

CGIScript.net csPassword.cgi is vulnerable: remote authenticated users can modify the .htaccess file and gain privileges by injecting newlines in the title field of the edit page. The impact is privilege escalation through file modification. No remediation or fix details are provided in the suppl...

CVE-2002-0751

Technical details for CVE-2002-0751 are not publicly available in the provided documents. Monitor for updates.

CVE-2002-0749

CGIscript.net csMailto.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the form-attachment field...

CVE-2002-0749

CVE-2002-0749 affects the CGI CSMailto.cgi from CGIscript.net. The vulnerability is due to unsafely handling shell metacharacters in the form-attachment field, enabling remote attackers to execute arbitrary commands on the affected system. The recorded CVSSv2 base score is 7.5 (HIGH) with network...

CVE-2002-0752

Technical details for CVE-2002-0752 are not publicly provided in the supplied documents. Monitor for updates from connected sources to obtain affected product/version, impact, or remediation information.

CVE-2002-0750

Technical details for CVE-2002-0750 are not publicly available in the provided connected documents; only a high-level description is present. Monitor for updates.

CGIScript.net 1.0 - Information Disclosure

CGIScript.net 1.0 - Information Disclosure source: https://www.securityfocus.com/bid/4764/info CGIScript.net provides various webmaster related tools and is maintained by Mike Barone and Andy Angrick. It is possible to cause numerous scripts provided by CGIScript.net to disclose sensitive system...

CGIScript.net 1.0 - Information Disclosure

source: https://www.securityfocus.com/bid/4764/info CGIScript.net provides various webmaster related tools and is maintained by Mike Barone and Andy Angrick. It is possible to cause numerous scripts provided by CGIScript.net to disclose sensitive system information. The following is a list of cgi...

CGIscript.net - csMailto.cgi - Remote Command Execution

CGIscript.net - csMailto.cgi - Remote Command Execution --------------------------------------------------------------------- Name : CGIscript.net - csMailto.cgi - Remote Command Execution Date : April 23, 2002 Product : csMailto Vuln Type : Access Validation Error Severity : HIGH RISK Vendor :...