high7.5Public exploit code
CVE-2001-1138
Directory traversal vulnerability in r.pl (aka r.cgi) of Randy Parker Power Up HTML 0.8033beta allows remote attackers to read arbitrary files and possibly exe…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Power Up HTML 0.8033 Beta - Directory Traversal Arbitrary File Disclosure2001-09-07 · remote · cgi · Verified
Impact
Directory traversal vulnerability in r.pl (aka r.cgi) of Randy Parker Power Up HTML 0.8033beta allows remote attackers to read arbitrary files and possibly execute arbitrary code via a .. (dot dot) in the FILE parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Randy Parker | Power Up Html | Version 0.8033_beta |
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/archive/1/212679
- http://www.securityfocus.com/bid/3304
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7092
- http://www.securityfocus.com/archive/1/212679
- http://www.securityfocus.com/bid/3304
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7092