VYPR
← All advisories
Unrated severityNVD Advisory· Published May 31, 2002· Updated Apr 16, 2026

CVE-2002-0310

CVE-2002-0310

Description

Netwin WebNews 1.1k CGI program includes several default usernames and cleartext passwords that cannot be deleted by the administrator, which allows remote attackers to gain privileges via the username/password combinations (1) testweb/newstest, (2) alwn3845/imaptest, (3) alwi3845/wtest3452, or (4) testweb2/wtest4879.

Affected products

4
  • Netwin/Webnews4 versions
    cpe:2.3:a:netwin:webnews:1.1h:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:netwin:webnews:1.1h:*:*:*:*:*:*:*
    • cpe:2.3:a:netwin:webnews:1.1i:*:*:*:*:*:*:*
    • cpe:2.3:a:netwin:webnews:1.1j:*:*:*:*:*:*:*
    • cpe:2.3:a:netwin:webnews:1.1k:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.