← Database

CVE-2000-0944

CRITICAL CVSS: 9.8 Published: 2000-12-19 Modified: 2026-06-16

Description

CGI Script Center News Update 1.1 does not properly validate the original news administration password during a password change operation, which allows remote attackers to modify the password without knowing the original password.

Affected Platforms

Cgi Script Center News Update

Weakness Type

CWE-522

References