VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 4, 2002· Updated Apr 16, 2026

CVE-2002-0921

CVE-2002-0921

Description

CGIScript.net csNews.cgi allows remote attackers to obtain potentially sensitive information, such as the full server pathname and other configuration settings, via the viewnews command with an invalid database, which leaks the information in error messages.

Affected products

2
  • Cgiscript.net/Csnews2 versions
    cpe:2.3:a:cgiscript.net:csnews:1.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:cgiscript.net:csnews:1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cgiscript.net:csnews:1.0_professional:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.