CVE-2002-0495

csSearch.cgi in csSearch 2.3 and earlier contains a remote command‑execution flaw. An attacker can trigger arbitrary Perl code by using the savesetup command and the setup parameter, which overwrites the setup.cgi configuration file loaded by csSearch.cgi. This yields remote, user‑independent com...