CVE-2002-0917: Cgiscript.net Cspassword

High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days.

CGIScript.net csPassword.cgi stores .htpasswd files under the web document root, which could allow remote authenticated users to download the file and crack the passwords of other users.

Affected products

• Cgiscript.net Cspassword: version 1.0 only

Published 2002-10-04. Last modified 2026-06-16.