CVE-2000-0526

MailStudio 2000 <2.0 - Path Traversal

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2000-0526. PoCs published by s0ftpr0ject.

AI-analyzed exploit summary The writeup describes multiple vulnerabilities in MailStudio 2000, including directory traversal, command injection, and arbitrary code execution via userreg.cgi and mailview.cgi. It provides example URLs demonstrating how to exploit these vulnerabilities.

Description

mailview.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack.

Exploits (1)

exploitdb WRITEUP VERIFIED
by s0ftpr0ject · textremotecgi
https://www.exploit-db.com/exploits/20008

The writeup describes multiple vulnerabilities in MailStudio 2000, including directory traversal, command injection, and arbitrary code execution via userreg.cgi and mailview.cgi. It provides example URLs demonstrating how to exploit these vulnerabilities.

Classification
Writeup 90%
Attack Type
Rce | Info Leak
Complexity
Trivial
Reliability
Theoretical
Target: MailStudio 2000
No auth needed
Prerequisites: Network access to the vulnerable MailStudio 2000 server
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2
Core References
Vendor Advisory mailing-list x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2000-06/0081.html
Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/1335

Scores

EPSS 0.0697
EPSS Percentile 93.4%

Details

Status published
Products (1)
3r_soft/mailstudio_2000 2.0
Published Jun 09, 2000
Tracked Since Feb 18, 2026