CVE-2002-0919

Description

CGIScript.net csPassword.cgi allows remote authenticated users to modify the .htaccess file and gain privileges via newlines in the title field of the edit page.

Affected products

• cgiscript.net / cspassword1.0 – 1.0

References

• MISChttp://online.securityfocus.com/archive/1/274727
• MISChttp://www.iss.net/security_center/static/9222.php
• MISChttp://www.securityfocus.com/bid/4888