CVE-2001-0212

CVE-2001-0212 describes a directory traversal in HIS Auktion 1.62 allowing remote read of arbitrary files via an encoded dot-dot in the menue parameter, with potential command execution through shell metacharacters. The Nessus plugin for HIS Auktion (auktion.cgi) flags a well-known flaw in the au...

HIS Auktion 1.62: "show files" vulnerability and remote command execute.

-----------UkR security team advisory 8------------ HIS Auktion 1.62: "show files" vulnerability and remote command execute. -------------------------------------------------- Name: HIS Auktion 1.62: "show files" vulnurability. Date: 11.02.2001 Author: UkR-XblP About: script "HIS Auktion 1.62" is...