Security Advisory

CVE-2000-0687

10

Vulnerability Description

Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the catdir parameter.
Published Date October 20, 2000
Official Source NIST NVD Advisory