CVE-2000-0944
Critical · 9.8CVSS
9.8
EPSS
11.3%
Published
Dec 19, 2000
CISA due date
—
The record
CGI Script Center News Update 1.1 does not properly validate the original news administration password during a password change operation, which allows remote attackers to modify the password without knowing the original password.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-113733 An issue was discovered in Django 6.1 before 6.1.3 and 6.0 before 6.0.10. CWE-522
- CVE-2026-89292 In Eclipse Mnestix Browser versions 1.6.0 up until but excluding 2.3.0 it was possible… CWE-522
- CVE-2026-105769 kaniko before 1.25.20 can send a Microsoft Entra ID (Azure AD) access token for Azure… CWE-522
- CVE-2026-116252 pgAdmin 4's materialized view refresh passed the target database's name to psql's… CWE-522
- CVE-2026-116245 libpq looks a connection service up in the service file of the operating-system account… CWE-522
- CVE-2026-116247 When a server in pgAdmin 4 had no password file, client certificate or client key… CWE-522
- CVE-2026-116244 When a pgAdmin 4 connection was not meant to use a Kerberos user's delegated credentials… CWE-522
- CVE-2026-116242 pgAdmin 4 opens SSH tunnels with the sshtunnel library but gave it neither… CWE-522