Unscored CVE-2001-1019 EUVD-2001-1000GHSA-wcjj-qr75-838m

Directory traversal vulnerability in view_item CGI program in sglMerchant 1.0 allows remote attackers to read arbitrary files via a .. (dot…

Published Feb 2, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in view_item CGI program in sglMerchant 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTML_FILE parameter.

References

20010908 sglMerchant Version 1.0 mailing-list
sglmerchant-dot-directory-traversal(7100) vdb-entry
3309 vdb-entry