CVE DATABASE / CVE-2002-1753
CVE-2002-1753
CVSS 7.5 · HIGH
Summary
csNewsPro.cgi in CGIScript.net csNews Professional (csNewsPro) allows remote attackers to execute arbitrary Perl code via the setup parameter, which is processed by the Perl eval function.
CVSS 2.0 breakdown
| Base score | 7.5 (HIGH) |
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| Attack vector | NETWORK |
| Attack complexity | LOW |
| Confidentiality | PARTIAL |
| Integrity | PARTIAL |
| Availability | PARTIAL |
Weakness type (CWE)
Affected products
Cgiscript csnews professional
Check this CVE live
Use our free CVE Lookup tool for the latest NVD record, or browse the full CISA KEV catalog.
References
- http://cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00106.html
- http://www.securityfocus.com/bid/4451
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8636
Data: NIST NVD. NVD last modified 2026-04-16. Always verify against the vendor advisory before acting.