RSS   Vulnerabilities for 'Auction weaver'   RSS

2000-12-19
 
CVE-2000-0811

 

 
Auction Weaver 1.0 through 1.04 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the username or bidfile form fields.

 
 
CVE-2000-0810

 

 
Auction Weaver 1.0 through 1.04 does not properly validate the names of form fields, which allows remote attackers to delete arbitrary files and directories via a .. (dot dot) attack.

 
2000-10-20
 
CVE-2000-0690

 

 
Auction Weaver CGI script 1.02 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the fromfile parameter.

 
 
CVE-2000-0687

 

 
Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the catdir parameter.

 
 
CVE-2000-0686

 

 
Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the fromfile parameter.

 

 >>> Vendor: Cgi script center 4 Products
Auction weaver
Subscribe me lite
Account manager
News update


Copyright 2017, cxsecurity.com

 

Back to Top