CVE-2002-0922

CGIScript.net csNews.cgi allows remote attackers to obtain database files via a direct URL-encoded request to (1) default%2edb or (2) default%2edb.style, or…

published August 31, 2002

CVSS
—
EPSS
3%
Percentile
88.1
In the wild
Unconfirmed
What it is

CGIScript.net csNews.cgi allows remote attackers to obtain database files via a direct URL-encoded request to (1) default%2edb or (2) default%2edb.style, or remote authenticated users to perform administrative actions via (3) a database parameter set to default%2edb.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03236 · 88.1th percentile
Published
2002-08-31T04:00Z
EPSS history
Timeline
  • 31 AUG 04:00Z
    CGIScript.net csNews.cgi allows remote attackers to obtain database files via a direct URL-encoded request to (1) default%2edb or (2) default%2edb.style, or…
    cvelistv5