CVE-2000-0054

SolutionScripts Home Free - Path Traversal

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2000-0054. PoCs published by k0ad k1d.

AI-analyzed exploit summary This exploit targets a directory traversal vulnerability in Home Free's search.cgi script, allowing an attacker to list directories outside the intended web filesystem by manipulating the 'letter' parameter. The script sends an HTTP GET request with traversal sequences and parses the response to extract directory listings.

Description

search.cgi in the SolutionScripts Home Free package allows remote attackers to view directories via a .. (dot dot) attack.

Exploits (1)

exploitdb WORKING POC VERIFIED
by k0ad k1d · perlremotecgi
https://www.exploit-db.com/exploits/19713

This exploit targets a directory traversal vulnerability in Home Free's search.cgi script, allowing an attacker to list directories outside the intended web filesystem by manipulating the 'letter' parameter. The script sends an HTTP GET request with traversal sequences and parses the response to extract directory listings.

Classification
Working Poc 95%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: Home Free (Perl CGI suite), search.cgi
No auth needed
Prerequisites: Network access to the target web server · Presence of vulnerable search.cgi script
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (1)

Core 1
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/921

Scores

EPSS 0.0584
EPSS Percentile 92.2%

Details

Status published
Products (1)
solution_scripts/home_free 1.0
Published Jan 03, 1999
Tracked Since Feb 18, 2026