20001120 CGIForum 1.0 Vulnerabilitymailing list
http://archives.neohapsis.com/archives/bugtraq/2000-11/0263.html CVE-2000-1171
Markus Triska CGIForum 1.0 - 'thesection' Directory Traversal
Record summary
CVE-2000-1171 has a selected CVSS score of 5.0; EIP currently links 1 catalogued exploit.
Description
Directory traversal vulnerability in cgiforum.pl script in CGIForum 1.0 allows remote attackers to ready arbitrary files via a .. (dot dot) attack in the "thesection" parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBMarkus Triska CGIForum 1.0 - 'thesection' Directory TraversalExploitDB exploitby zorgonNot analyzed1 file
References
41963vdb entry
http://www.securityfocus.com/bid/1963 cgiforum-view-files(5553)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/5553 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2000-1171