Vulnerability Details CVE-2002-1753
csNewsPro.cgi in CGIScript.net csNews Professional (csNewsPro) allows remote attackers to execute arbitrary Perl code via the setup parameter, which is processed by the Perl eval function.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.059
EPSS Ranking 90.3%
CVSS Severity
CVSS v2 Score 7.5
References
- http://cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00106.html
- http://www.securityfocus.com/bid/4451
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8636
- http://cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00106.html
- http://www.securityfocus.com/bid/4451
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8636
Products affected by CVE-2002-1753
-
cpe:2.3:a:cgiscript:csnews_professional:1.0