Exploitation Summary
EIP tracks 1 public exploit for CVE-2001-0693. PoCs published by Auriemma Luigi.
AI-analyzed exploit summary This exploit leverages a path traversal vulnerability in WebTrends Live by appending an encoded space (%20) to a script filename, allowing an attacker to view the source code of arbitrary scripts on the server.
Description
WebTrends HTTP Server 3.1c and 3.5 allows a remote attacker to view script source code via a filename followed by an encoded space (%20).
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Auriemma Luigi · textremotecgi
https://www.exploit-db.com/exploits/20895
This exploit leverages a path traversal vulnerability in WebTrends Live by appending an encoded space (%20) to a script filename, allowing an attacker to view the source code of arbitrary scripts on the server.
Classification
Working Poc 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target:
WebTrends Live (version not specified)
No auth needed
Prerequisites:
Access to the WebTrends Live web server
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026
Full analysis →
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/6639
Vendor Advisory vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/2812
Mailing List mailing-list
x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=99166905208903&w=2
Scores
EPSS
0.0306
EPSS Percentile
85.9%
Details
Status
published
Products (2)
webtrends/webtrends_enterprise_reporting_server
3.1c
webtrends/webtrends_enterprise_reporting_server_nt
3.5
Published
Sep 20, 2001
Tracked Since
Feb 18, 2026