cbcvebase.
CVE-2000-0811
published 2000-12-19

CVE-2000-0811: Auction Weaver 1.0 through 1.04 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the username or bidfile form fields.

PriorityP420medium5CVSS 2.0
AVNACLAuNCPINAN
EPSS
1.56%
72.2th percentile
Auction Weaver 1.0 through 1.04 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the username or bidfile form fields.

Affected

5 ranges
VendorProductVersion rangeFixed in
cgi_script_centerauction_weaver——
cgi_script_centerauction_weaver——
cgi_script_centerauction_weaver——
cgi_script_centerauction_weaver——
cgi_script_centerauction_weaver——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.