Unscored severity · published May 13, 2000
CVE-2000-0435
The allmanageup.pl file upload CGI script in the Allmanage Website administration software 2.6 can be called directly by remote attackers, which allows them to modify user…
–
CVSS
1.6%
EPSS
No
On KEV
Description
The allmanageup.pl file upload CGI script in the Allmanage Website administration software 2.6 can be called directly by remote attackers, which allows them to modify user accounts or web pages.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AL
Allmanage · Matthew Redman
2.6 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2000-0435
CVE.org
https://www.cve.org/CVERecord?id=CVE-2000-0435
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2000-05/0167.html
www.osvdb.org
http://www.osvdb.org/1337
www.securityfocus.com
http://www.securityfocus.com/bid/1217
More from Allmanage
–
CVE-2000-0434
The administrative password for the Allmanage web site administration software is stored in plaintext in a file which could be accessed by remote attackers