20010212 WebSPIRS CGI script "show files" Vulnerability.mailing list
http://archives.neohapsis.com/archives/bugtraq/2001-02/0217.html CVE-2001-0211
SilverPlatter WebSPIRS 3.3.1 - File Disclosure
Record summary
CVE-2001-0211 has a selected CVSS score of 5.0; EIP currently links 1 catalogued exploit.
Description
Directory traversal vulnerability in WebSPIRS 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the sp.nextform parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBSilverPlatter WebSPIRS 3.3.1 - File DisclosureExploitDB exploitby cuctemaNot analyzed1 file
References
32362vdb entry
http://www.securityfocus.com/bid/2362 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2001-0211