NetSight
high7.5

CVE-2002-0924

CGIScript.net csNews.cgi allows remote authenticated users to execute arbitrary Perl code via terminating quotes and metacharacters in text fields of the "Adva…

Impact

CGIScript.net csNews.cgi allows remote authenticated users to execute arbitrary Perl code via terminating quotes and metacharacters in text fields of the "Advanced Settings" capability.

Affected products

VendorProductAffected versions
Cgiscript.NetCsnews
Versions 1.0, 1.0_professional

References