vulnwire
7.5high

CVE-2002-14101 exploit

Easy Guestbook CGI programs do not authenticate the administrator, which allows remote attackers to (1) delete entries via direct access of…

Published 23 y ago · modified 4 mo ago · JSON

CVSS
7.5
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
2.8%
percentile 87%
Public exploits
1
Exploit-DB

Easy Guestbook CGI programs do not authenticate the administrator, which allows remote attackers to (1) delete entries via direct access of admin.cgi, or (2) reconfigure Guestbook via direct access of config.cgi.

Exploit prediction (EPSS)

2.81% probability of exploitation in the next 30 days, higher than 87% of all scored CVEs.

Exploits and detections

  • EDB-21659 Ben Chivers Easy Guestbook 1.0 - Administrative Access · webapps · 2002-07-29

CVSS scores

Assigned byVersionScoreVector
NVD2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

References

  • archives.neohapsis.com /archives/bugtraq/2002-07/0356.html · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • iss.net /security_center/static/9697.php · vdb-entry, x_refsource_XF, x_transferred
  • securityfocus.com /bid/5341 · vdb-entry, x_refsource_BID, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.