Cgiscript.net Cspassword — known CVE vulnerabilities

Every CVE whose affected-product data names Cgiscript.net Cspassword, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2002-0917 — CVSS 7.5 (high): CGIScript.net csPassword.cgi stores .htpasswd files under the web document root, which could allow remote authenticated users to download…
• CVE-2002-0919 — CVSS 7.5 (high): CGIScript.net csPassword.cgi allows remote authenticated users to modify the .htaccess file and gain privileges via newlines in the title…
• CVE-2002-0920 — CVSS 5.1 (medium): CGIScript.net csPassword.cgi stores usernames and unencrypted passwords in the password.cgi.tmp temporary file while modifying data, which…
• CVE-2002-0918 — CVSS 5.0 (medium): CGIScript.net csPassword.cgi leaks sensitive information such as the pathname of the server in debug messages that are presented when the…