exploitDog

GHSA-wcjj-qr75-838m

Опубликовано: 30 апр. 2022

Источник: github

Github: Не прошло ревью

Описание

Directory traversal vulnerability in view_item CGI program in sglMerchant 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTML_FILE parameter.

Directory traversal vulnerability in view_item CGI program in sglMerchant 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTML_FILE parameter.

Ссылки

https://nvd.nist.gov/vuln/detail/CVE-2001-1019
https://exchange.xforce.ibmcloud.com/vulnerabilities/7100
http://www.securityfocus.com/archive/1/212825
http://www.securityfocus.com/bid/3309

EPSS

Процентиль: 79%

0.02012

Низкий

CVE ID

Связанные уязвимости

CVE-2001-1019

nvd

почти 25 лет назад

Directory traversal vulnerability in view_item CGI program in sglMerchant 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTML_FILE parameter.

EPSS

Процентиль: 79%

0.02012

Низкий

CVE ID