CVEvulnerability
CVE-2002-0537
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2002-07-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
The admin.html file in StepWeb Search Engine (SWS) 2.5 stores passwords in links to manager.pl, which allows remote attackers who can access the admin.html file to gain administrative privileges to SWS.
Affected configurations
• stepweb sws 2.5
References
- http://archives.neohapsis.com/archives/bugtraq/2002-04/0148.html Exploit, Patch, Vendor Advisory
- http://www.iss.net/security_center/static/8849.php Vendor Advisory
- http://www.securityfocus.com/bid/4503 Patch, Vendor Advisory
- http://archives.neohapsis.com/archives/bugtraq/2002-04/0148.html Exploit, Patch, Vendor Advisory
- http://www.iss.net/security_center/static/8849.php Vendor Advisory
- http://www.securityfocus.com/bid/4503 Patch, Vendor Advisory