CVE-2002-0918

CGIScript.net csPassword.cgi leaks sensitive information such as the pathname of the server in debug messages that are presented when the script fails, which allows remote attackers to obtain the information via a "remove" option in the command parameter, which generates an error.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

3.50% chance of exploitation in the next 30 days, 88th percentile

Published

2002-08-31

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/21494

References

• CVE Record
• NVD entry

Related

• CVE-2002-0913
• CVE-2002-0919
• CVE-2002-0909
• CVE-2002-0922
• CVE-2002-0908
• CVE-2002-0923