CVE-2002-0324

CVE-2002-0324 describes a critical vulnerability in Greymatter 1.21c and earlier, specifically when the Bookmarklet feature is enabled. An attacker can gain administrative privileges by guessing the name of a gmrightclick-*.reg file, which contains the administrator's cleartext password, and retrieving it from the web server before the administrator clears it. This vulnerability has a CVSS score of 7.5, indicating high severity with a network attack vector, low complexity, and potential for partial confidentiality, integrity, and availability impact. While there is no evidence of active exploitation, public exploit code, or Metasploit/Nuclei modules, the vulnerability has garnered significant community discussion with 10 mentions, suggesting awareness and potential for future exploitation.