CVE-2002-0922
CGIScript.net csNews.cgi allows remote attackers to obtain database files via a direct URL-encoded request to (1) default%2edb or (2) default%2edb.style, or remote authenticated users to perform administrative actions via (3) a database parameter set to default%2edb.
Scoring
- CVSS base score
- 0.28
- EPSS probability
- 7.07%
- Published
- 2002-08-31
- Last modified
- 2026-03-16
Affected products
- n/a n/a