CVE-2002-0537

Published: Jul 3, 2002Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

The admin.html file in StepWeb Search Engine (SWS) 2.5 stores passwords in links to manager.pl, which allows remote attackers who can access the admin.html file to gain administrative privileges to SWS.

Affected (1)

Products: Stepweb: Sws

Stepweb

1 product

Sws

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Stepweb Sws	Version 2.5

References (6)

http://archives.neohapsis.com/archives/bugtraq/2002-04/0148.html

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://www.iss.net/security_center/static/8849.php

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/4503

Source: cve@mitre.org

PatchVendor Advisory

http://archives.neohapsis.com/archives/bugtraq/2002-04/0148.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

http://www.iss.net/security_center/static/8849.php

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/4503

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.