CVE-2000-0720: Gwscripts News Publisher

Medium severity, CVSS 5.0. EPSS: 6.2% chance of exploitation in the next 30 days.

news.cgi in GWScripts News Publisher does not properly authenticate requests to add an author to the author index, which allows remote attackers to add new authors by directly posting an HTTP request to the new.cgi program with an addAuthor parameter, and setting the Referer to the news.cgi program.

Affected products

• Gwscripts Gwscripts News Publisher: version 1.05 only; version 1.05a only; version 1.05b only; version 1.06 only

Published 2000-10-20. Last modified 2026-06-16.