20010212 Way board: "show files" Vulnerability with null bite bugmailing list
http://archives.neohapsis.com/archives/bugtraq/2001-02/0212.html CVE-2001-0214
Way-Board 2.0 - File Disclosure
Record summary
CVE-2001-0214 has a selected CVSS score of 5.0; EIP currently links 1 catalogued exploit.
Description
Way-board CGI program allows remote attackers to read arbitrary files by specifying the filename in the db parameter and terminating the filename with a null byte.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBWay-Board 2.0 - File DisclosureExploitDB exploitby cuctemaNot analyzed1 file
References
32370vdb entry
http://www.securityfocus.com/bid/2370 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2001-0214