CVE-2000-0690 Auction Weaver CGI script 1.02 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the fromfile parameter.
HighCVSS 10.0
EPSS 10.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Auction Weaver CGI script 1.02 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the fromfile parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cgi script center auction weaver | = 1.0 | No fix listed |
| cgi script center auction weaver | = 1.02 | No fix listed |
References
- 20000830 More problems with Auction Weaver & CGI Script Center. mailing-list vendor-advisory
- 20000902 Re: More problems with Auction Weaver & CGI Script Center. exploit mailing-list vendor-advisory