CVE

Id
5311  
CVE No.
CVE-2002-0922  
Status
Candidate  
Description
CGIScript.net csNews.cgi allows remote attackers to obtain database files via a direct URL-encoded request to (1) default%2edb or (2) default%2edb.style, or remote authenticated users to perform administrative actions via (3) a database parameter set to default%2edb.  
Phase
Proposed (20020830)  
Votes
ACCEPT(1) Frech | NOOP(3) Cole, Foat, Wall  
Comments