CVE-2002-0495

csSearch.cgi in csSearch 2.3 and earlier allows remote attackers to execute arbitrary Perl code via the savesetup command and the setup parameter, which overwrites the setup.cgi configuration file that is loaded by csSearch.cgi.

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

13.34% chance of exploitation in the next 30 days, 96th percentile

Published

2003-04-02

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/21354

References

• CVE Record
• NVD entry

Related

• CVE-2002-0492
• CVE-2002-0499
• CVE-2002-0486
• CVE-2002-0502
• CVE-2002-0484
• CVE-2002-0504