EUVD-2000-0927

Malware in sbrugna...

Metertek pagelog.cgi Traversal Arbitrary File Access

The 'pagelog.cgi' cgi is installed. This CGI has a well known security flaw that lets an attacker create arbitrary files on the remote server, ending in .txt, and reading arbitrary files ending in .txt or .log Warning : this flaw was not tested by Nessus. Check the existence of...

CVE-2000-0940

Directory traversal vulnerability in Metertek pagelog.cgi allows remote attackers to read arbitrary files via a .. dot dot attack on the "name" or "display" parameter...

CVE-2000-0940

Directory traversal vulnerability in Metertek pagelog.cgi allows remote attackers to read arbitrary files via a .. dot dot attack on the "name" or "display" parameter...

CVE-2000-0940

Metertek pagelog.cgi is affected by a directory traversal vulnerability (CVE-2000-0940). A remote attacker can read arbitrary files by supplying a .. sequence through the name or display parameter. Public documents confirm the CGI module is installed and vulnerable, with the issue described as al...