CVE-2000-0944

Critical

Published: 19/12/2000(UTC)Translated: 30/05/2026(UTC)NVD NIST

Summary

CGI Script Center News Update 1.1 does not properly validate the original news administration password during a password change operation, allowing remote attackers to modify the password without knowing the original password.

Risk Assessment

Attackers can gain control over the administrative account, potentially leading to security breaches and data loss.

Recommendation

It is recommended to update to the latest version of the software that fixes the password validation issue and to implement additional security measures.

Original NVD description (English source)

CGI Script Center News Update 1.1 does not properly validate the original news administration password during a password change operation, which allows remote attackers to modify the password without knowing the original password.