cve/cves/2000/CVE-2000-0720.md at main

admin/cve

0 Fork 0

mirror of https://github.com/0xMarcio/cve.git synced 2026-10-29 17:01:02 +00:00

Files

T

0xMarcio 81017c9871 Expand CVE PoC coverage and metadata

2026-09-01 19:01:07 +02:00

796 B

Raw Permalink Blame History

CVE-2000-0720

Description

news.cgi in GWScripts News Publisher does not properly authenticate requests to add an author to the author index, which allows remote attackers to add new authors by directly posting an HTTP request to the new.cgi program with an addAuthor parameter, and setting the Referer to the news.cgi program.

POC

Reference

No PoCs from references.

Github

No PoCs found on GitHub currently.

ExploitDB

https://www.exploit-db.com/exploits/20183

796 B Raw Permalink Blame History