CVE:CVE-2000-0688
CNNVD:CNNVD-200010-061
Subscribe Me LITE不再正授权证改变管理员密码行为。远程攻击者可以通过直接调用带有setpwd参数的subscribe.pl脚本提升帐户管理员特权。
solution:Upgrade cgi_script_center subscribe_me_lite to a higher version than 2.0,and avoid the version 2.0