İçeriğe atla
Noroxi

cgiscript.net kayıtları

cgiscript.net üreticisine ait 14 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
3
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

    Çubuk: toplam · koyu kısım: CISA KEV.

    Tekrar eden sınıflar

      Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

      CWE

      Saldırı profili

      Tüm kayıtlar

      14 kayıt
      • CVE-2002-0749
        33İzleyin

        CGIscript.net csMailto.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the form-attachment field.

        YüksekCVSS 7,5Kavram kanıtıEPSS %11

        cgiscript.net · csmailto12 Ağu 2002

      • CVE-2002-0923
        32İzleyin

        CGIScript.net csNews.cgi allows remote authenticated users to read arbitrary files, and possibly gain privileges, via the (1) pheader or (2)

        YüksekCVSS 7,5Kavram kanıtıEPSS %7

        cgiscript.net · csnews4 Eki 2002

      • CVE-2002-0919
        31İzleyin

        CGIScript.net csPassword.cgi allows remote authenticated users to modify the .htaccess file and gain privileges via newlines in the title fi

        YüksekCVSS 7,5Kavram kanıtıEPSS %3

        cgiscript.net · cspassword4 Eki 2002

      • CVE-2002-0751
        31İzleyin

        CGIscript.net csMailto.cgi program allows remote attackers to use csMailto as a "spam proxy" and send mail to arbitrary users via modified (

        YüksekCVSS 7,5İstismar yokEPSS %3

        cgiscript.net · csmailto12 Ağu 2002

      • CVE-2002-0917
        31İzleyin

        CGIScript.net csPassword.cgi stores .htpasswd files under the web document root, which could allow remote authenticated users to download th

        YüksekCVSS 7,5İstismar yokEPSS %2

        cgiscript.net · cspassword4 Eki 2002

      • CVE-2002-0924
        30İzleyin

        CGIScript.net csNews.cgi allows remote authenticated users to execute arbitrary Perl code via terminating quotes and metacharacters in text

        YüksekCVSS 7,5İstismar yokEPSS %1

        cgiscript.net · csnews4 Eki 2002

      • CVE-2002-0918
        21İzleyin

        CGIScript.net csPassword.cgi leaks sensitive information such as the pathname of the server in debug messages that are presented when the sc

        OrtaCVSS 5,0Kavram kanıtıEPSS %3

        cgiscript.net · cspassword4 Eki 2002

      • CVE-2002-0922
        21İzleyin

        CGIScript.net csNews.cgi allows remote attackers to obtain database files via a direct URL-encoded request to (1) default%2edb or (2) defaul

        OrtaCVSS 5,0Kavram kanıtıEPSS %3

        cgiscript.net · csnews4 Eki 2002

      • CVE-2004-0665
        21İzleyin

        csFAQ.cgi in csFAQ allows remote attackers to gain sensitive information via an invalid database parameter, which reveals the path to the we

        OrtaCVSS 5,0Kavram kanıtıEPSS %3

        cgiscript.net · csfaq6 Ağu 2004

      • CVE-2002-1751
        21İzleyin

        csLiveSupport.cgi in CGIScript.net csLiveSupport allows remote attackers to execute arbitrary Perl code via the setup parameter, which is pr

        OrtaCVSS 5,0İstismar yokEPSS %2

        cgiscript.net · cslivesupport31 Ara 2002

      • CVE-2002-0750
        21İzleyin

        CGIscript.net csMailto.cgi program allows remote attackers to read arbitrary files by specifying the target filename in the form-attachment

        OrtaCVSS 5,0İstismar yokEPSS %2

        cgiscript.net · csmailto12 Ağu 2002

      • CVE-2002-0752
        21İzleyin

        CGIscript.net csMailto.cgi program exports feedback to a file that is accessible from the web document root, which could allow remote attack

        OrtaCVSS 5,0İstismar yokEPSS %2

        cgiscript.net · csmailto12 Ağu 2002

      • CVE-2002-0921
        20İzleyin

        CGIScript.net csNews.cgi allows remote attackers to obtain potentially sensitive information, such as the full server pathname and other con

        OrtaCVSS 5,0İstismar yokEPSS %1

        cgiscript.net · csnews4 Eki 2002

      • CVE-2002-0920
        20İzleyin

        CGIScript.net csPassword.cgi stores usernames and unencrypted passwords in the password.cgi.tmp temporary file while modifying data, which c

        OrtaCVSS 5,1İstismar yokEPSS %1

        cgiscript.net · cspassword4 Eki 2002