csSearch.cgi in csSearch 2.3 and earlier allows remote attackers to execute arbitrary Perl code via the savesetup command and the setup par…

published 2002-08-12 24 y ago modified 2026-06-16 4 mo ago also EUVD-2002-0491

cvss: 10.0; version 2.0, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 13.3%; EPSS 13.3% chance of exploitation in 30 days, percentile 96%
public exploits: 1; Exploit-DB

csSearch.cgi in csSearch 2.3 and earlier allows remote attackers to execute arbitrary Perl code via the savesetup command and the setup parameter, which overwrites the setup.cgi configuration file that is loaded by csSearch.cgi.

Patch / fix

links 2

securityfocus.com/bid/4368 advisory
iss.net/security_center/static/8636.php advisory

Timeline

2002-03-26 First public exploit (EDB-21354)
2002-08-12 Published

Exploit prediction

13.34% chance of exploitation in the next 30 days, higher than 96% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

EDB-21354 CSSearch 2.3 - Remote Command Execution remote, 2002-03-26
securityfocus.com http://www.securityfocus.com/bid/4368 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by	version	score	vector
NVD	2.0	10.0	AV:N/AC:L/Au:N/C:C/I:C/A:C

Classification

Weakness

CWE-94 Improper Control of Generation of Code

References

securityfocus.com /bid/4368
vdb-entry, broken-link, exploit, patch, third-party-advisory, vendor-advisory
iss.net /security_center/static/8636.php
vdb-entry, broken-link, patch, vendor-advisory
securityfocus.com /archive/1/264169
mailing-list, broken-link, third-party-advisory, vdb-entry, vendor-advisory
cgiscript.net /cgi-script/csNews/csNews.cgi?database=cgi.db&command=viewone&id=7
product

Sources

CVE List CVE-2002-0495
NVD CVE-2002-0495

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary