What’s Vulnerable › Vulnerabilities

CVE-2000-0688

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 7.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2000-10-20 · updated 2026-06-16

Description

Subscribe Me LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the subscribe.pl script with the setpwd parameter.

Affected products

• Cgi Script Center Subscribe Me Lite: 2.0

References

• http://archives.neohapsis.com/archives/bugtraq/2000-08/0292.html
• http://marc.info/?l=bugtraq&m=96722957421029&w=2
• http://www.cgiscriptcenter.com/subscribe/
• http://www.securityfocus.com/bid/1607
• http://archives.neohapsis.com/archives/bugtraq/2000-08/0292.html
• http://marc.info/?l=bugtraq&m=96722957421029&w=2
• http://www.cgiscriptcenter.com/subscribe/
• http://www.securityfocus.com/bid/1607

Get alerted when CVE-2000-0688 or the next vulnerability affects your stack