CVE-2000-0720

Published: Oct 20, 2000Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

news.cgi in GWScripts News Publisher does not properly authenticate requests to add an author to the author index, which allows remote attackers to add new authors by directly posting an HTTP request to the new.cgi program with an addAuthor parameter, and setting the Referer to the news.cgi program.

Affected (4)

Products: Gwscripts: Gwscripts News Publisher

Gwscripts

1 product

Gwscripts News Publisher

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Gwscripts Gwscripts News Publisher	Version 1.05
Gwscripts Gwscripts News Publisher	Version 1.05a
Gwscripts Gwscripts News Publisher	Version 1.05b
Gwscripts Gwscripts News Publisher	Version 1.06

References (6)

http://www.securityfocus.com/bid/1621

Source: cve@mitre.org

ExploitVendor Advisory

http://www.securityfocus.com/templates/archive.pike?list=1&msg=003301c0123b%2418f8c1a0%24953b29d4%40e8s9s4

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/5169

Source: cve@mitre.org

http://www.securityfocus.com/bid/1621

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

http://www.securityfocus.com/templates/archive.pike?list=1&msg=003301c0123b%2418f8c1a0%24953b29d4%40e8s9s4

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/5169

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.