PatchTheCVEcgiscript vulnerabilities
Recent CVEs affecting cgiscript products. 4 tracked.
cgiscript has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2002-12-31. Highest priority: CVE-2002-0495 (score 64/100).
- CVE-2002-1753 HIGH 7.5 DOWNGRADE csNewsPro.cgi in CGIScript.net csNews Professional (csNewsPro) allows remote attackers to execute arbitrary Pe
- CVE-2002-1752 HIGH 7.5 DOWNGRADE csChatRBox.cgi in CGIScript.net csChat-R-Box allows remote attackers to execute arbitrary Perl code via the se
- CVE-2002-1750 HIGH 7.5 DOWNGRADE csGuestbook.cgi in CGISCRIPT.NET csGuestbook 1.0 allows remote attackers to execute arbitrary Perl code via th
- CVE-2002-0495 HIGH 10.0 UPGRADE csSearch.cgi in csSearch 2.3 and earlier allows remote attackers to execute arbitrary Perl code via the savese
FAQ
How do I fix cgiscript vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is cgiscript being exploited right now?
None of the tracked cgiscript CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which cgiscript CVE should I patch first?
CVE-2002-0495 currently ranks highest (64/100): csSearch.cgi in csSearch 2.3 and earlier allows remote attackers to execute arbitrary Perl code via the savese.