medium5.0Public exploit code
CVE-2000-1005
Directory traversal vulnerability in html_web_store.cgi and web_store.cgi CGI programs in eXtropia WebStore allows remote attackers to read arbitrary files via…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- extropia webstore 1.0/2.0 - Directory Traversal2000-10-09 · remote · cgi · Verified
Impact
Directory traversal vulnerability in html_web_store.cgi and web_store.cgi CGI programs in eXtropia WebStore allows remote attackers to read arbitrary files via a .. (dot dot) attack on the page parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Extropia | Extropia Webstore | Versions 1.0, 2.0 |
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/archive/1/138495
- http://www.securityfocus.com/bid/1774
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5347
- http://www.securityfocus.com/archive/1/138495
- http://www.securityfocus.com/bid/1774
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5347