CGIScript.net csPassword.cgi stores .htpasswd files under the web document root, which could allow remote authenticated users to download the file and crack the passwords of other users...
7.5CVSS6.3AI score0.02426EPSS
SaveExploits0References3
Cvelist•added 2002/08/31 4:0 a.m.•23 views
CVE-2002-0917
CGIScript.net csPassword.cgi stores .htpasswd files under the web document root, which could allow remote authenticated users to download the file and crack the passwords of other users...