Unrated severityNVD Advisory· Published Jun 25, 2002· Updated Jun 16, 2026
CVE-2002-0324
CVE-2002-0324
Description
Greymatter 1.21c and earlier with the Bookmarklet feature enabled allows remote attackers to read a cleartext password and gain administrative privileges by guessing the name of a gmrightclick-*.reg file which contains the administrator name and password in cleartext, then retrieving the file from the web server before the Greymatter administrator performs a "Clear And Exit" action.
Affected products
5cpe:2.3:a:noah_gray:graymatter:1.1:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:noah_gray:graymatter:1.1:*:*:*:*:*:*:*
- cpe:2.3:a:noah_gray:graymatter:1.1b:*:*:*:*:*:*:*
- cpe:2.3:a:noah_gray:graymatter:1.21:*:*:*:*:*:*:*
- cpe:2.3:a:noah_gray:graymatter:1.2b:*:*:*:*:*:*:*
- Range: <=1.21c
Patches
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- www.dangerousmonkey.com/dangblog/dangarch/00000051.htmnvdExploitVendor Advisory
- www.iss.net/security_center/static/8277.phpnvdExploitVendor Advisory
- marc.infonvd
- www.securityfocus.com/bid/4169nvd
News mentions
0No linked articles in our index yet.