cbcvebase.
CVE-2000-0810
published 2000-12-19

CVE-2000-0810: Auction Weaver 1.0 through 1.04 does not properly validate the names of form fields, which allows remote attackers to delete arbitrary files and directories…

PriorityP426high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
1.61%
72.9th percentile
Auction Weaver 1.0 through 1.04 does not properly validate the names of form fields, which allows remote attackers to delete arbitrary files and directories via a .. (dot dot) attack.

Affected

5 ranges
VendorProductVersion rangeFixed in
cgi_script_centerauction_weaver——
cgi_script_centerauction_weaver——
cgi_script_centerauction_weaver——
cgi_script_centerauction_weaver——
cgi_script_centerauction_weaver——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.