CVE-2000-0944
Critical · 9.8CVSS
9.8
EPSS
11.3%
Published
Dec 19, 2000
CISA due date
—
The record
CGI Script Center News Update 1.1 does not properly validate the original news administration password during a password change operation, which allows remote attackers to modify the password without knowing the original password.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-55857 MariaDB Connector/J is used to connect applications developed in Java to MariaDB and… CWE-522
- CVE-2026-55856 MariaDB Connector/J is used to connect applications developed in Java to MariaDB and… CWE-522
- CVE-2026-53586 libgit2 is a portable C implementation of the Git core methods provided as a linkable… CWE-522
- CVE-2026-15806 The HTTPPasswordMgr class in the urllib.request module, along with its subclasses… CWE-522
- CVE-2026-7017 HTTP::Tiny versions before 0.095 for Perl forward credential headers to cross-origin… CWE-522
- CVE-2026-55188 RustFS is a distributed object storage system built in Rust. CWE-522
- CVE-2026-45407 Dokku is a docker-powered PaaS. CWE-522
- CVE-2026-44622 Charging station authentication identifiers are publicly accessible via web-based mapping… CWE-522