CVE-2002-0710 Directory traversal vulnerability in sendform.cgi 1.44 and earlier allows remote attackers to read arbitrary files by specifying the desired files in the BlurbFilePath parameter.
MediumCVSS 6.4
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in sendform.cgi 1.44 and earlier allows remote attackers to read arbitrary files by specifying the desired files in the BlurbFilePath parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rod clark sendform.cgi | = 1.4 | No fix listed |
| rod clark sendform.cgi | = 1.4.1 | No fix listed |
| rod clark sendform.cgi | = 1.4.2 | No fix listed |
| rod clark sendform.cgi | = 1.4.3 | No fix listed |
| rod clark sendform.cgi | = 1.4.4 | No fix listed |
References
- 20020730 Directory traversal vulnerability in sendform.cgi mailing-list
- sendform-blurbfile-directory-traversal(9725) vdb-entry
- 3568 vdb-entry
- www.scn.org vendor-advisory
- 5286 vdb-entry