Unscored CVE-2002-0934 EUVD-2002-0924GHSA-3pfq-9fq5-mfj5

Directory traversal vulnerability in Jon Hedley AlienForm2 (typically installed as af.cgi or alienform.cgi) allows remote attackers to read…

Published Aug 31, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in Jon Hedley AlienForm2 (typically installed as af.cgi or alienform.cgi) allows remote attackers to read or modify arbitrary files via an illegal character in the middle of a .. (dot dot) sequence in the parameters (1) _browser_out or (2) _out_file.

References

alienform2-directory-traversal(9325) vdb-entry
4983 vdb-entry
20020610 AlienForm2 CGI script: arbitrary file read/write mailing-list