EUVD-2001-0210

Malware in sbrugna...

CVE-2001-0210

CVE-2001-0210 describes a directory traversal in the commerce.cgi CGI program that lets remote attackers read arbitrary files by manipulating the page parameter with a .. (dot dot) traversal. Documented impact is partial confidentiality loss; attack vector is remote over the network with low comp...

Commerce.cgi Directory Traversal

Introduction: Commerce.cgi can have your store's catalog up and running on the web in literally a couple of hours. The easy to use Store Manager will even allow you to add and remove products from your inventory right through your web browser. Best of all, it's free, vulnerable & open source. The...