CVE-2002-0922
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 3.2%
from disclosure to weapon0 days
Published on NVDAug 31
1st PoCJun 11
exploitation probability
3.2%top 13% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
CGIScript.net csNews.cgi allows remote attackers to obtain database files via a direct URL-encoded request to (1) default%2edb or (2) default%2edb.style, or remote authenticated users to perform administrative actions via (3) a database parameter set to default%2edb.
Affected products
n/a · n/apublic PoCs found — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/21532⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.