CVE-2002-0495

N/A Unknown

Published: August 12, 2002 Modified: April 16, 2026

Description

csSearch.cgi in csSearch 2.3 and earlier allows remote attackers to execute arbitrary Perl code via the savesetup command and the setup parameter, which overwrites the setup.cgi configuration file that is loaded by csSearch.cgi.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://www.cgiscript.net/cgi-script/csNews/csNews.cgi?database=cgi.db&command=viewone&id=7

Source: cve@mitre.org

Product

http://www.iss.net/security_center/static/8636.php

Source: cve@mitre.org

Broken Link Patch Vendor Advisory

http://www.securityfocus.com/archive/1/264169

Source: cve@mitre.org

Broken Link Third Party Advisory VDB Entry Vendor Advisory

http://www.securityfocus.com/bid/4368

Source: cve@mitre.org

Broken Link Exploit Patch Third Party Advisory VDB Entry Vendor Advisory

http://www.cgiscript.net/cgi-script/csNews/csNews.cgi?database=cgi.db&command=viewone&id=7

Source: af854a3a-2127-422b-91ae-364da2661108

Product

http://www.iss.net/security_center/static/8636.php

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link Patch Vendor Advisory

http://www.securityfocus.com/archive/1/264169

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link Third Party Advisory VDB Entry Vendor Advisory

http://www.securityfocus.com/bid/4368

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link Exploit Patch Third Party Advisory VDB Entry Vendor Advisory

8 reference(s) from NVD

Quick Stats

CVSS v3 Score

N/A / 10.0

Exploitation Status

Not in CISA KEV

Weaknesses (CWE)

CWE-94

Affected Vendors

cgiscript

Related CVEs