high7.5
CVE-2002-1753
csNewsPro.cgi in CGIScript.net csNews Professional (csNewsPro) allows remote attackers to execute arbitrary Perl code via the setup parameter, which is process…
Impact
csNewsPro.cgi in CGIScript.net csNews Professional (csNewsPro) allows remote attackers to execute arbitrary Perl code via the setup parameter, which is processed by the Perl eval function.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cgiscript | Csnews Professional | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00106.html
- http://www.securityfocus.com/bid/4451
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8636
- http://cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00106.html
- http://www.securityfocus.com/bid/4451
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8636