high7.5Public exploit code
CVE-2000-1176
Directory traversal vulnerability in YaBB search.pl CGI script allows remote attackers to read arbitrary files via a ..
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- YaBB 9.11.2000 - 'search.pl' Arbitrary Command Execution2000-11-07 · remote · cgi · Verified
Impact
Directory traversal vulnerability in YaBB search.pl CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack in the "catsearch" form field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Yabb | Yabb | Version 2000-09-11 |