Unscored severity · published Oct 4, 2002
CVE-2002-0961
Vulnerabilities in Voxel Dot Net CBMS 0.7 and earlier allow remote attackers to conduct unauthorized operations as other users, e.g
–
CVSS
1.2%
EPSS
No
On KEV
Description
Vulnerabilities in Voxel Dot Net CBMS 0.7 and earlier allow remote attackers to conduct unauthorized operations as other users, e.g. by deleting clients via dltclnt.php, possibly in a SQL injection attack.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 68% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CB
Cbms · Voxel
through 0.7 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-0961
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-0961
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2002-06/0043.html
Vendor Advisory
http://www.iss.net/security_center/static/9295.php
Exploit
http://www.securityfocus.com/bid/4957
More from Cbms
–
CVE-2002-0960
Multiple cross-site scripting vulnerabilities in Voxel Dot Net CBMS 0.7 and earlier allows remote attackers to execute arbitrary script as other CBMS users