PatchTheCVEcgiscript.net vulnerabilities
Recent CVEs affecting cgiscript.net products. 14 tracked.
cgiscript.net has 14 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2004-08-06. Highest priority: CVE-2002-0923 (score 55/100).
- CVE-2004-0665 MEDIUM 5.0 DOWNGRADE csFAQ.cgi in csFAQ allows remote attackers to gain sensitive information via an invalid database parameter, wh
- CVE-2002-1751 MEDIUM 5.0 DOWNGRADE csLiveSupport.cgi in CGIScript.net csLiveSupport allows remote attackers to execute arbitrary Perl code via th
- CVE-2002-0924 HIGH 7.5 DOWNGRADE CGIScript.net csNews.cgi allows remote authenticated users to execute arbitrary Perl code via terminating quot
- CVE-2002-0923 HIGH 7.5 DOWNGRADE CGIScript.net csNews.cgi allows remote authenticated users to read arbitrary files, and possibly gain privileg
- CVE-2002-0922 MEDIUM 5.0 DOWNGRADE CGIScript.net csNews.cgi allows remote attackers to obtain database files via a direct URL-encoded request to
- CVE-2002-0921 MEDIUM 5.0 DOWNGRADE CGIScript.net csNews.cgi allows remote attackers to obtain potentially sensitive information, such as the full
- CVE-2002-0920 MEDIUM 5.1 DOWNGRADE CGIScript.net csPassword.cgi stores usernames and unencrypted passwords in the password.cgi.tmp temporary file
- CVE-2002-0919 HIGH 7.5 DOWNGRADE CGIScript.net csPassword.cgi allows remote authenticated users to modify the .htaccess file and gain privilege
- CVE-2002-0918 MEDIUM 5.0 DOWNGRADE CGIScript.net csPassword.cgi leaks sensitive information such as the pathname of the server in debug messages
- CVE-2002-0917 HIGH 7.5 DOWNGRADE CGIScript.net csPassword.cgi stores .htpasswd files under the web document root, which could allow remote auth
- CVE-2002-0752 MEDIUM 5.0 MITIGATE CGIscript.net csMailto.cgi program exports feedback to a file that is accessible from the web document root, w
- CVE-2002-0751 HIGH 7.5 MITIGATE CGIscript.net csMailto.cgi program allows remote attackers to use csMailto as a "spam proxy" and send mail to
- CVE-2002-0750 MEDIUM 5.0 MITIGATE CGIscript.net csMailto.cgi program allows remote attackers to read arbitrary files by specifying the target fi
- CVE-2002-0749 HIGH 7.5 MITIGATE CGIscript.net csMailto.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in t
FAQ
How do I fix cgiscript.net vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is cgiscript.net being exploited right now?
None of the tracked cgiscript.net CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which cgiscript.net CVE should I patch first?
CVE-2002-0923 currently ranks highest (55/100): CGIScript.net csNews.cgi allows remote authenticated users to read arbitrary files, and possibly gain privileg.