CVE-2001-1019

The OpenVAS entry and CVE data confirm a directory traversal flaw in the sglMerchant 1.0 CGI view_item that allows reading arbitrary files by manipulating HTML_FILE. The vulnerability stems from escaping the HTML root and reading system files, enabling information disclosure. No exploit details o...

CVE-2001-1019

Directory traversal vulnerability in viewitem CGI program in sglMerchant 1.0 allows remote attackers to read arbitrary files via a .. dot dot in the HTMLFILE parameter...