Security Advisory
CVE-2002-0923
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
CGIScript.net csNews.cgi allows remote authenticated users to read arbitrary files, and possibly gain privileges, via the (1) pheader or (2) pfooter parameters in the "Advanced Settings" capability.