CVE-2000-0720
- State
- Published
- Severity
- Not scored
- Published
- May 7, 2001
- Updated
- Aug 8, 2024
- Reserved
- Sep 19, 2000
Description
news.cgi in GWScripts News Publisher does not properly authenticate requests to add an author to the author index, which allows remote attackers to add new authors by directly posting an HTTP request to the new.cgi program with an addAuthor parameter, and setting the Referer to the news.cgi program.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- news-publisher-add-author(5169)vdb-entry
- 1621vdb-entry
- 20000829 News Publisher CGI Vulnerabilitymailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.