CVE-2000-0688

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
20/10/2000
Last modified:
03/04/2025

Description

Subscribe Me LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the subscribe.pl script with the setpwd parameter.

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:cgi_script_center:subscribe_me_lite:2.0:*:*:*:*:*:*:*