CVE-2000-1132

Published: Jan 9, 2001Modified: Apr 16, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:P

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

DCForum cgforum.cgi CGI script allows remote attackers to read arbitrary files, and delete the program itself, via a malformed "forum" variable.

Affected (6)

Products: Dcscripts: Dcforum

1 product

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Dcscripts Dcforum	Version 1.0
Dcscripts Dcforum	Version 2.0
Dcscripts Dcforum	Version 3.0
Dcscripts Dcforum	Version 4.0
Dcscripts Dcforum	Version 5.0
Dcscripts Dcforum	Version 6.0

References (10)

http://archives.neohapsis.com/archives/bugtraq/2000-11/0218.html

Source: cve@mitre.org

PatchVendor Advisory

http://www.dcscripts.com/dcforum/dcfNews/124.html#1

Source: cve@mitre.org

http://www.osvdb.org/1646

Source: cve@mitre.org

http://www.securityfocus.com/bid/1951

Source: cve@mitre.org

ExploitPatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/5533

Source: cve@mitre.org

http://archives.neohapsis.com/archives/bugtraq/2000-11/0218.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.dcscripts.com/dcforum/dcfNews/124.html#1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/1646

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/1951

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/5533

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.