Vulnerability in Cgicentral Webstore 400
CVE-2001-1344
WSSecurity.pl in WebStore allows remote attackers to bypass authentication by providing the program with a filename that exists, which is made easier by (1) inserting a null character or (2) .. (dot dot).
EPSS: 0.029 (85.6th percentile) — read the EPSS interpretation.
Affected products
- Cgicentral Webstore_400 — versions 4.14
- Cgicentral Webstore_400cs — versions 4.14
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (Exploit, vdb-entry, x_refsource_BID, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)