CVE-2002-0537

The admin.html file in StepWeb Search Engine SWS 2.5 stores passwords in links to manager.pl, which allows remote attackers who can access the admin.html file to gain administrative privileges to SWS...

CVE-2002-0537

The CVE-2002-0537 entry concerns StepWeb Search Engine (SWS) 2.5 where passwords are stored in links to manager.pl within the admin.html page. This design allows remote attackers who can access admin.html to gain administrative privileges on SWS. The description in multiple sources confirms the v...