Description
Subscribe Me LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the subscribe.pl script with the setpwd parameter.
Exploits (2)
References (4)
Scores
EPSS
0.0678
EPSS Percentile
91.3%
Details
Status
published
Products (1)
cgi_script_center/subscribe_me_lite
2.0
Published
Oct 20, 2000
Tracked Since
Feb 18, 2026