CVE-2001-0210

CVE-2001-0210 describes a directory traversal in the commerce.cgi CGI program that lets remote attackers read arbitrary files by manipulating the page parameter with a .. (dot dot) traversal. Documented impact is partial confidentiality loss; attack vector is remote over the network with low comp...