VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 4, 2002· Updated Jun 16, 2026

CVE-2002-0924

CVE-2002-0924

Description

CGIScript.net csNews.cgi allows remote authenticated users to execute arbitrary Perl code via terminating quotes and metacharacters in text fields of the "Advanced Settings" capability.

Affected products

3
  • Cgiscript.net/Csnews3 versions
    cpe:2.3:a:cgiscript.net:csnews:1.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:cgiscript.net:csnews:1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cgiscript.net:csnews:1.0_professional:*:*:*:*:*:*:*
    • (no CPE)

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.