Download
| Alert*
Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the catdir parameter. CVSS Score and Metrics +CVSS Score and Metrics -
|