critical10.0Public exploit code
CVE-2002-0495
csSearch.cgi in csSearch 2.3 and earlier allows remote attackers to execute arbitrary Perl code via the savesetup command and the setup parameter, which overwr…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- CSSearch 2.3 - Remote Command Execution2002-03-26 · remote · cgi · Verified
Impact
csSearch.cgi in csSearch 2.3 and earlier allows remote attackers to execute arbitrary Perl code via the savesetup command and the setup parameter, which overwrites the setup.cgi configuration file that is loaded by csSearch.cgi.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cgiscript | Cssearch Professional | through 2.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.cgiscript.net/cgi-script/csNews/csNews.cgi?database=cgi.db&command=viewone&id=7
- http://www.iss.net/security_center/static/8636.php
- http://www.securityfocus.com/archive/1/264169
- http://www.securityfocus.com/bid/4368
- http://www.cgiscript.net/cgi-script/csNews/csNews.cgi?database=cgi.db&command=viewone&id=7
- http://www.iss.net/security_center/static/8636.php
- http://www.securityfocus.com/archive/1/264169
- http://www.securityfocus.com/bid/4368