CVE-2002-0324: Noah Gray Graymatter

High severity, CVSS 7.5. EPSS: 2.7% chance of exploitation in the next 30 days.

Greymatter 1.21c and earlier with the Bookmarklet feature enabled allows remote attackers to read a cleartext password and gain administrative privileges by guessing the name of a gmrightclick-*.reg file which contains the administrator name and password in cleartext, then retrieving the file from the web server before the Greymatter administrator performs a "Clear And Exit" action.

Affected products

• Noah Gray Graymatter: version 1.1 only; version 1.1b only; version 1.2b only; version 1.21 only

Published 2002-06-25. Last modified 2026-06-16.