2 matches found
CVE-2005-0735
newsscript.pl for NewsScript allows remote attackers to gain privileges by setting the mode parameter to admin...
10CVSS6.9AI score0.07666EPSS
SaveExploits2References1
CVE-2005-0735
The CVE refers to NewsScript’s newsscript.pl CGI, where an attacker can escalate privileges remotely by sending mode=admin. Affected product: NewsScript (NewsScript.co.uk). Root cause: incomplete access validation in the CGI parameters allowing admin rights to be set via the mode parameter. Impac...
10CVSS7AI score0.07666EPSS
SaveExploits2References1Affected Software1
20