CVE-2000-0687 Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the catdir parameter.
HighCVSS 10.0
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the catdir parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cgi script center auction weaver | <= 1.02 | No fix listed |
References
- 20000823 Auction WeaverT LITE 1.0 exploit mailing-list vendor-advisory
- 1630 exploit vdb-entry vendor-advisory