Description
Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the catdir parameter.
References
- 1630 vdb-entry
- 20000823 Auction WeaverT LITE 1.0 mailing-list
Unscored
CVE-2000-0687
EUVD-2000-0683GHSA-pqf9-f88f-jphj
Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the catdir paramete…
Published Sep 21, 2000 · Updated Aug 8, 2024 · Assigned by mitre