Vulnerability Details CVE-2001-0086
CGI Script Center Subscribe Me LITE 2.0 and earlier allows remote attackers to delete arbitrary mailing list users without authentication by directly calling subscribe.pl with the target address as a parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 72.1%
CVSS Severity
CVSS v2 Score 5.0
References
- http://archives.neohapsis.com/archives/bugtraq/2000-12/0160.html
- http://www.securityfocus.com/bid/2108
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5735
- http://archives.neohapsis.com/archives/bugtraq/2000-12/0160.html
- http://www.securityfocus.com/bid/2108
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5735
Products affected by CVE-2001-0086
-
cpe:2.3:a:cgi_script_center:subscribe_me_lite:1.0
-
cpe:2.3:a:cgi_script_center:subscribe_me_lite:2.0