Description (CNA)
CGIScript.net csNews.cgi allows remote authenticated users to read arbitrary files, and possibly gain privileges, via the (1) pheader or (2) pfooter parameters in the "Advanced Settings" capability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.iss.net/security_center/static/9333.php
- http://www.securityfocus.com/bid/4994
- http://archives.neohapsis.com/archives/bugtraq/2002-06/0091.html
ADP enrichment
No English description supplied.