Vulnerabilities > CVE-2002-1410

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
ben-chivers
easy-scripts-archive
exploit available
NVD
Published: 2003-04-11
Updated: 2008-09-05

Summary

Easy Guestbook CGI programs do not authenticate the administrator, which allows remote attackers to (1) delete entries via direct access of admin.cgi, or (2) reconfigure Guestbook via direct access of config.cgi.

Vulnerable Configurations

Part Description Count
Application
Ben_Chivers
1
Application
Easy_Scripts_Archive
1

Exploit-Db

descriptionBen Chivers Easy Guestbook 1.0 Administrative Access Vulnerability. CVE-2002-1410. Webapps exploit for cgi platform
idEDB-ID:21659
last seen2016-02-02
modified2002-07-29
published2002-07-29
reporterArek Suroboyo
sourcehttps://www.exploit-db.com/download/21659/
titleBen Chivers Easy Guestbook 1.0 Administrative Access Vulnerability

References