CVE-2000-0688

Subscribe Me LITE - Privilege Escalation

Title source: llm
STIX 2.1

Description

Subscribe Me LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the subscribe.pl script with the setpwd parameter.

Exploits (2)

exploitdb WORKING POC VERIFIED
by n30 · htmlremotecgi
https://www.exploit-db.com/exploits/20177
exploitdb WORKING POC VERIFIED
by teleh0r · perlremotecgi
https://www.exploit-db.com/exploits/20176

Scores

EPSS 0.0678
EPSS Percentile 91.3%

Details

Status published
Products (1)
cgi_script_center/subscribe_me_lite 2.0
Published Oct 20, 2000
Tracked Since Feb 18, 2026