CVE-2002-0923

CVE-2002-0923 affects CGIScript.net csNews.cgi. Multiple OpenVAS/Nessus/NVD records indicate that some csNews.cgi deployments are vulnerable to remote access via the Advanced Settings parameters (pheader, pfooter), enabling reading of arbitrary files and potentially elevating privileges. The vuln...

CVE-2002-0923: Undefined Security Weakness

CGIScript.net csNews.cgi allows remote authenticated users to read arbitrary files, and possibly gain privileges, via the 1 pheader or 2 pfooter parameters in the "Advanced Settings" capability...