CVE-2002-0124 MDG Computer Services Web Server 4D/eCommerce 3.5.3 allows remote attackers to exploit directory traversal vulnerability via a ../ (dot dot) containing URL-encoded slashes in the HTTP request.
MediumCVSS 5.0
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
MDG Computer Services Web Server 4D/eCommerce 3.5.3 allows remote attackers to exploit directory traversal vulnerability via a ../ (dot dot) containing URL-encoded slashes in the HTTP request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mdg computer services web server 4d ecommerce | = 3.5.3 | No fix listed |
References
- 20020114 Web Server 4D/eCommerce 3.5.3 Directory Traversal Vulnerability mailing-list vendor-advisory
- ws4d-dot-directory-traversal(7878) vdb-entry vendor-advisory
- 3872 vdb-entry