Vulnerability in Mike Spice Mikes Vote Cgi

CVE-2002-1628

Directory traversal vulnerability in vote.cgi for Mike Spice Mike's Vote CGI before 1.3 allows remote attackers to write arbitrary files via .. (dot dot) sequences in the type parameter.

EPSS: 0.033 (87.1th percentile) — read the EPSS interpretation.

Affected products

Mike_spice Mikes_vote_cgi — versions 1.0, 1.1, 1.2
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (Patch, vdb-entry, x_refsource_BID)
cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Patch, third-party-advisory)