← Back

Cgicentral

cgicentral

2 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Webstore 400
webstore_400
2 CVEs
Webstore 400cs
webstore_400cs
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2001-1344
1Cgicentral
2Webstore 400
Webstore 400cs
Apr 16, 2026
Jun 12, 2001
N/A· v4
N/A· v3
7.5 HIGH· v2
WSSecurity.pl in WebStore allows remote attackers to bypass authentication by providing the program with a filename that exists, which is made easier by (1) inserting a null character or (2) .. (dot dot).
CVE-2001-1343
1Cgicentral
2Webstore 400
Webstore 400cs
Apr 16, 2026
Jun 12, 2001
N/A· v4
N/A· v3
7.5 HIGH· v2
ws_mail.cgi in WebStore 400/400CS 4.14 allows remote authenticated WebStore administrators to execute arbitrary code via shell metacharacters in the kill parameter.