20020727 Easy Guestbook Vulnerabilitiesmailing list
http://archives.neohapsis.com/archives/bugtraq/2002-07/0356.html CVE-2002-1410
Ben Chivers Easy Guestbook 1.0 - Administrative Access
Record summary
CVE-2002-1410 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.
Description
Easy Guestbook CGI programs do not authenticate the administrator, which allows remote attackers to (1) delete entries via direct access of admin.cgi, or (2) reconfigure Guestbook via direct access of config.cgi.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBBen Chivers Easy Guestbook 1.0 - Administrative AccessExploitDB exploitby Arek SuroboyoNot analyzed1 file
References
4easy-guestbook-gain-access(9697)vdb entry
http://www.iss.net/security_center/static/9697.php 5341vdb entry
http://www.securityfocus.com/bid/5341 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2002-1410