CVE-2002-0924: Cgiscript.net Csnews

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

CGIScript.net csNews.cgi allows remote authenticated users to execute arbitrary Perl code via terminating quotes and metacharacters in text fields of the "Advanced Settings" capability.

Affected products

• Cgiscript.net Csnews: version 1.0 only; version 1.0_professional only

Published 2002-10-04. Last modified 2026-06-16.