Vulnerability in Avi Alkalay Contribute.cgi

CVE-2005-3097

Directory traversal vulnerability in Avi Alkalay contribute.cgi (aka contribute.pl), dated 16 Jun 2002, allows remote attackers to overwrite arbitrary files via ".." sequences in the contribdir variable.

EPSS: 0.013 (67.6th percentile) — read the EPSS interpretation.

Affected products

Avi_alkalay Contribute.cgi — versions 16_jun_2002
N/a — versions n/a

References

cve@mitre.org (x_refsource_MISC, Vendor Advisory)
cve@mitre.org (x_refsource_OSVDB, Exploit, vdb-entry)