CVE-2000-0688

Subscribe Me LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the subscribe.pl script with the setpwd parameter.

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

7.81% chance of exploitation in the next 30 days, 95th percentile

Published

2000-09-21

Updated

2024-08-08

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/20177
• https://www.exploit-db.com/exploits/20176

Security advisories

• http://archives.neohapsis.com/archives/bugtraq/2000-08/0292.html
• http://www.securityfocus.com/bid/1607

References

• CVE Record
• NVD entry