Auction Weaver 1.0 through 1.04 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the username or bidfile form fields.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2000-12-18 21:00
Updated : 2018-05-02 18:29
NVD link : CVE-2000-0811
Mitre link : CVE-2000-0811
JSON object : View
CWE
Products Affected
cgi_script_center
- auction_weaver