Insecure Storage of .htpasswd Files in CGIScript.net csPassword.cgi

CVE-2002-0917 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

CGIScript.net csPassword.cgi stores .htpasswd files under the web document root, which could allow remote authenticated users to download the file and crack the passwords of other users.

Learn more about our Web App Pen Testing.