CVE-2002-0923: Cgiscript.net Csnews

High severity, CVSS 7.5. EPSS: 7% chance of exploitation in the next 30 days.

CGIScript.net csNews.cgi allows remote authenticated users to read arbitrary files, and possibly gain privileges, via the (1) pheader or (2) pfooter parameters in the "Advanced Settings" capability.

Affected products

• Cgiscript.net Csnews: version 1.0 only; version 1.0_professional only

Published 2002-10-04. Last modified 2026-06-16.