Description
Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the fromfile parameter.
References
- 1630 vdb-entry
- 20000823 Auction WeaverT LITE 1.0 mailing-list
Unscored
CVE-2000-0686
EUVD-2000-0682GHSA-jghw-mw88-pq53
Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the fromfile parame…
Published Sep 21, 2000 · Updated Aug 8, 2024 · Assigned by mitre