Vulnerability in Cgi Script Center Auction Weaver
CVE-2000-0687
Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the catdir parameter.
EPSS: 0.025 (83.2th percentile) — read the EPSS interpretation.
Affected products
- Cgi_script_center Auction_weaver
- N/a — versions n/a
References
- cve@mitre.org (Exploit, vdb-entry, x_refsource_BID, Vendor Advisory)
- cve@mitre.org (Vendor Advisory, mailing-list, Exploit, x_refsource_BUGTRAQ)