CVE-2002-1752 Code injection in n/a
Remote attackers can execute arbitrary Perl code in csChat-R-Box via the setup parameter, posing a critical risk to web servers hosting this script.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2002-1752?
CVE-2002-1752 is a high-severity code injection vulnerability in n/a, published on 21 Jun 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
csChatRBox.cgi in CGIScript.net csChat-R-Box allows remote attackers to execute arbitrary Perl code via the setup parameter, which is processed by the Perl eval function.
Weakness: CWE-94
Which versions are affected by CVE-2002-1752?
It affects 1 product.
Products include Cgiscript Cschat-R-Box.
How do I fix CVE-2002-1752?
No fix has been published for CVE-2002-1752 yet. Limit exposure of the affected software until one is available.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2002-1752 being exploited?
There is no known exploitation of CVE-2002-1752 in the wild and no public exploit code.
Sources
Also known as GHSA-28j6-2jcf-4jq3.