Auction Weaver

auction_weaver

CVEs (5)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2000-0811 1Cgi Script Center 1Auction Weaver Apr 16, 2026 Dec 19, 2000 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Auction Weaver 1.0 through 1.04 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the username or bidfile form fields.
CVE-2000-0810 1Cgi Script Center 1Auction Weaver Apr 16, 2026 Dec 19, 2000 N/A· v4 N/A· v3 7.5 HIGH· v2 Auction Weaver 1.0 through 1.04 does not properly validate the names of form fields, which allows remote attackers to delete arbitrary files and directories via a .. (dot dot) attack.
CVE-2000-0690 1Cgi Script Center 1Auction Weaver Apr 16, 2026 Oct 20, 2000 N/A· v4 N/A· v3 10.0 HIGH· v2 Auction Weaver CGI script 1.02 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the fromfile parameter.
CVE-2000-0687 1Cgi Script Center 1Auction Weaver Apr 16, 2026 Oct 20, 2000 N/A· v4 N/A· v3 10.0 HIGH· v2 Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the catdir parameter.
CVE-2000-0686 1Cgi Script Center 1Auction Weaver Apr 16, 2026 Oct 20, 2000 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the fromfile parameter.