CVE-2002-0922

CGIScript.net csNews.cgi allows remote attackers to obtain database files via a direct URL-encoded request to (1) default%2edb or (2) default%2edb.style, or remote authenticated users to perform administrative actions via (3) a database parameter set to default%2edb.

• http://archives.neohapsis.com/archives/bugtraq/2002-06/0091.html
• http://www.iss.net/security_center/static/9332.phpVendor Advisory
• http://www.iss.net/security_center/static/9333.phpVendor Advisory
• http://www.securityfocus.com/bid/4991Vendor Advisory
• http://www.securityfocus.com/bid/4993Exploit, Vendor Advisory
• http://archives.neohapsis.com/archives/bugtraq/2002-06/0091.html
• http://www.iss.net/security_center/static/9332.phpVendor Advisory
• http://www.iss.net/security_center/static/9333.phpVendor Advisory
• http://www.securityfocus.com/bid/4991Vendor Advisory
• http://www.securityfocus.com/bid/4993Exploit, Vendor Advisory

Published

Oct 4, 2002

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2002-0916Format string vulnerability in the allowuser code for the St…
• CVE-2002-0917CGIScript.net csPassword.cgi stores .htpasswd files under th…
• CVE-2002-0918CGIScript.net csPassword.cgi leaks sensitive information suc…
• CVE-2002-0919CGIScript.net csPassword.cgi allows remote authenticated use…
• CVE-2002-0920CGIScript.net csPassword.cgi stores usernames and unencrypte…
• CVE-2002-0921CGIScript.net csNews.cgi allows remote attackers to obtain p…
• CVE-2002-0923CGIScript.net csNews.cgi allows remote authenticated users t…
• CVE-2002-0924CGIScript.net csNews.cgi allows remote authenticated users t…
• CVE-2002-0925Format string vulnerability in mmsyslog function allows remo…
• CVE-2002-0926Directory traversal vulnerability in Wolfram Research webMat…
• CVE-2002-0928Buffer overflow in the Pirch 98 IRC client allows remote att…
• CVE-2002-0929Buffer overflows in the DHCP server for NetWare 6.0 SP1 allo…