CVEvulnerability

CVE-2002-1410

7.5 HIGH Published 2003-04-11 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2003-04-11
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Easy Guestbook CGI programs do not authenticate the administrator, which allows remote attackers to (1) delete entries via direct access of admin.cgi, or (2) reconfigure Guestbook via direct access of config.cgi.

Affected configurations

• ben chivers ben chivers guestbook 1.0 • easy scripts archive easy guestbook 1.0

References

http://archives.neohapsis.com/archives/bugtraq/2002-07/0356.html Exploit, Patch, Vendor Advisory
http://www.iss.net/security_center/static/9697.php Vendor Advisory
http://www.securityfocus.com/bid/5341 Exploit, Patch, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2002-07/0356.html Exploit, Patch, Vendor Advisory
http://www.iss.net/security_center/static/9697.php Vendor Advisory
http://www.securityfocus.com/bid/5341 Exploit, Patch, Vendor Advisory