VULNERABILITY INTELLIGENCE

CVE-2000-0688

CVSS score7.5 HIGH

EPSS probability7.81%

CISA KEVNot currently listed

Published2000-10-20

Last modified2026-06-16

Description

Subscribe Me LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the subscribe.pl script with the setpwd parameter.