Cgi Script Center

8 CVEs across 3 Cgi Script Center products. Browse Cgi Script Center vulnerabilities, severities, and proof-of-concept exploits.

Cgi Script Center products with known CVEs

ProductCVEs
Auction Weaver5
Subscribe Me Lite2
Account Manager1
Cgi Script Center CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2001-00862001-02-12CGI Script Center Subscribe Me LITE 2.0 and earlier allows remote attackers to delete arbitrary mailing list users without authentication by directly calling s…
CVE-2000-08112000-12-19Auction Weaver 1.0 through 1.04 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the username or bidfile form fields.
CVE-2000-08102000-12-19Auction Weaver 1.0 through 1.04 does not properly validate the names of form fields, which allows remote attackers to delete arbitrary files and directories vi…
CVE-2000-06902000-10-20Auction Weaver CGI script 1.02 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the fromfile parameter.
CVE-2000-06892000-10-20Account Manager LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Acc…
CVE-2000-06882000-10-20Subscribe Me LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Accoun…
CVE-2000-06872000-10-20Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the catdir parameter.
CVE-2000-06862000-10-20Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the fromfile parameter.