CVE:CVE-2002-0923
CNNVD:CNNVD-200210-129
CGIScript.net csNews.cgi存在漏洞。远程认证用户借助"Advanced Settings"功能中的(1) pheader或者(2）pfooter参数读取任意文件且可能提升特权。
solution:Upgrade cgiscript.net csnews to a higher version than 1.0,1.0_professional,and avoid the version 1.0,1.0_professional