CVE
- Id
- 5311
- CVE No.
- CVE-2002-0922
- Status
- Candidate
- Description
- CGIScript.net csNews.cgi allows remote attackers to obtain database files via a direct URL-encoded request to (1) default%2edb or (2) default%2edb.style, or remote authenticated users to perform administrative actions via (3) a database parameter set to default%2edb.
- Phase
- Proposed (20020830)
- Votes
- ACCEPT(1) Frech | NOOP(3) Cole, Foat, Wall
- Comments