CVE-2000-0810

Published: Dec 19, 2000Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Auction Weaver 1.0 through 1.04 does not properly validate the names of form fields, which allows remote attackers to delete arbitrary files and directories via a .. (dot dot) attack.

Affected (5)

Products: Cgi Script Center: Auction Weaver

Cgi Script Center

1 product

Auction Weaver

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Cgi Script Center Auction Weaver	Version 1.01
Cgi Script Center Auction Weaver	Version 1.02
Cgi Script Center Auction Weaver	Version 1.03
Cgi Script Center Auction Weaver	Version 1.04
Cgi Script Center Auction Weaver	Version 1.0

References (6)

http://www.osvdb.org/1600

Source: cve@mitre.org

http://www.securityfocus.com/bid/1782

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/5371

Source: cve@mitre.org

http://www.osvdb.org/1600

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/1782

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/5371

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.