critical9.8Public exploit code
CVE-2000-0944
CGI Script Center News Update 1.1 does not properly validate the original news administration password during a password change operation, which allows remote …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- News Update 1.1 - Change Admin Password2000-11-15 · webapps · cgi · Verified
Impact
CGI Script Center News Update 1.1 does not properly validate the original news administration password during a password change operation, which allows remote attackers to modify the password without knowing the original password.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cgi | Script Center News Update | Version 1.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2000-10/0402.html
- http://www.securityfocus.com/bid/1881
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5433
- http://archives.neohapsis.com/archives/bugtraq/2000-10/0402.html
- http://www.securityfocus.com/bid/1881
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5433