CVE-2000-1176
YaBB - Directory Traversal via Search.pl Catsearch Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2000-1176. PoCs published by rpc.
AI-analyzed exploit summary The exploit describes a directory traversal and command injection vulnerability in YaBB's search.pl script due to improper input validation in the open() function. An attacker can use '/../' sequences and shell commands to traverse directories and execute arbitrary commands.
Description
Directory traversal vulnerability in YaBB search.pl CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack in the "catsearch" form field.
Exploits (1)
The exploit describes a directory traversal and command injection vulnerability in YaBB's search.pl script due to improper input validation in the open() function. An attacker can use '/../' sequences and shell commands to traverse directories and execute arbitrary commands.