CVE-2001-0253

iWeb Hyperseek 2000 - Directory Traversal via show Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2001-0253. PoCs published by MC GaN.

AI-analyzed exploit summary This exploit leverages a directory traversal vulnerability in the `hsx.cgi` script by using `../` sequences and a null byte (`%00`) to bypass path sanitization and read arbitrary files, such as `/etc/passwd`. The attack is delivered via a crafted URL.

Description

Directory traversal vulnerability in hsx.cgi program in iWeb Hyperseek 2000 allows remote attackers to read arbitrary files and directories via a .. (dot dot) attack in the show parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by MC GaN · textremotemultiple

https://www.exploit-db.com/exploits/20601

View Code ZIP pw:eip

This exploit leverages a directory traversal vulnerability in the `hsx.cgi` script by using `../` sequences and a null byte (`%00`) to bypass path sanitization and read arbitrary files, such as `/etc/passwd`. The attack is delivered via a crafted URL.

Classification

Working Poc 90%

Attack Type

Info Leak

Complexity

Trivial

Reliability

Reliable

Target: hsx.cgi (version unspecified, likely older web server/CGI implementations)

No auth needed

Prerequisites: Target server with vulnerable `hsx.cgi` script accessible · Network access to the target web server

MITRE ATT&CK

T1006 - Direct Volume Access T1083 - File and Directory Discovery

mistral-large-3 · analyzed Feb 18, 2026 Full analysis →

References (4)

Core 4

Core References

US Government Resource third-party-advisory x_refsource_cert-vn

http://www.kb.cert.org/vuls/id/146704

Exploit, Patch, Vendor Advisory vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/2314

Exploit, Vendor Advisory mailing-list x_refsource_bugtraq

http://archives.neohapsis.com/archives/bugtraq/2001-01/0463.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/6012

Scores

EPSS 0.1065

EPSS Percentile 95.3%

Details

Status published

Products (1)

iweb_systems/hyperseek 2000

Published Jun 02, 2001

Tracked Since Feb 18, 2026