Vulnerability in 24link

CVE-2000-1118

24Link 1.06 web server allows remote attackers to bypass access restrictions by prepending strings such as "/+/" or "/." to the HTTP GET request.

EPSS: 0.014 (70.5th percentile) — read the EPSS interpretation.

Affected products

  • 24link — versions 1.06
  • N/a — versions n/a

References

  • cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ, Patch)