CVE-2002-0923: Undefined Security Weakness

CGIScript.net csNews.cgi allows remote authenticated users to read arbitrary files, and possibly gain privileges, via the 1 pheader or 2 pfooter parameters in the "Advanced Settings" capability...

CVE-2002-0921: Undefined Security Weakness

CGIScript.net csNews.cgi allows remote attackers to obtain potentially sensitive information, such as the full server pathname and other configuration settings, via the viewnews command with an invalid database, which leaks the information in error messages...

CVE-2002-0919: Undefined Security Weakness

CGIScript.net csPassword.cgi allows remote authenticated users to modify the .htaccess file and gain privileges via newlines in the title field of the edit page...

CVE-2002-0749

CGIscript.net csMailto.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the form-attachment field...

CVE-2002-0751

Technical details for CVE-2002-0751 are not publicly available in the provided documents. Monitor for updates.

CVE-2002-0749

CVE-2002-0749 affects the CGI CSMailto.cgi from CGIscript.net. The vulnerability is due to unsafely handling shell metacharacters in the form-attachment field, enabling remote attackers to execute arbitrary commands on the affected system. The recorded CVSSv2 base score is 7.5 (HIGH) with network...

CVE-2002-0750

Technical details for CVE-2002-0750 are not publicly available in the provided connected documents; only a high-level description is present. Monitor for updates.

CVE-2002-0752

Technical details for CVE-2002-0752 are not publicly provided in the supplied documents. Monitor for updates from connected sources to obtain affected product/version, impact, or remediation information.

CVE-2002-0752: Undefined Security Weakness

CGIscript.net csMailto.cgi program exports feedback to a file that is accessible from the web document root, which could allow remote attackers to obtain sensitive information by directly accessing the file...

CVE-2002-0751: Undefined Security Weakness

CGIscript.net csMailto.cgi program allows remote attackers to use csMailto as a "spam proxy" and send mail to arbitrary users via modified 1 form-to, 2 form-from, and 3 form-results parameters...

CGIScript.net 1.0 - Information Disclosure

CGIScript.net 1.0 - Information Disclosure source: https://www.securityfocus.com/bid/4764/info CGIScript.net provides various webmaster related tools and is maintained by Mike Barone and Andy Angrick. It is possible to cause numerous scripts provided by CGIScript.net to disclose sensitive system...

CGIScript.net 1.0 - Information Disclosure

source: https://www.securityfocus.com/bid/4764/info CGIScript.net provides various webmaster related tools and is maintained by Mike Barone and Andy Angrick. It is possible to cause numerous scripts provided by CGIScript.net to disclose sensitive system information. The following is a list of cgi...

CGIscript.net - csMailto.cgi - Remote Command Execution

CGIscript.net - csMailto.cgi - Remote Command Execution --------------------------------------------------------------------- Name : CGIscript.net - csMailto.cgi - Remote Command Execution Date : April 23, 2002 Product : csMailto Vuln Type : Access Validation Error Severity : HIGH RISK Vendor :...

CGIScript.net - csMailto Hidden Form Field Remote Command Execution

CGIScript.net - csMailto Hidden Form Field Remote Command Execution source: https://www.securityfocus.com/bid/4579/info CGIScript.NET csMailto is a Perl script designed to support multiple mailto: forms. A vulnerability has been reported in some versions of this script. Reportedly, configuration...

CGIScript.net - csMailto Hidden Form Field Remote Command Execution

source: https://www.securityfocus.com/bid/4579/info CGIScript.NET csMailto is a Perl script designed to support multiple mailto: forms. A vulnerability has been reported in some versions of this script. Reportedly, configuration values used by the script are contained in hidden form values. As a...