CVE-2000-0050

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

The Allaire Spectra Webtop allows authenticated users to access other Webtop sections by specifying explicit URLs.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published
Jan 4, 2000
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-00515.0The Allaire Spectra Configuration Wizard allows remote attackers to cause a denial of service by repeatedly resubmitting data collections foCVE-2000-00527.2Red Hat userhelper program in the usermode package allows local users to gain root access via PAM and a .. (dot dot) attack.CVE-2000-00537.5Microsoft Commercial Internet System (MCIS) IMAP server allows remote attackers to cause a denial of service via a malformed IMAP request.CVE-2000-00545.0search.cgi in the SolutionScripts Home Free package allows remote attackers to view directories via a .. (dot dot) attack.CVE-2000-00557.2Buffer overflow in Solaris chkperm command allows local users to gain root access via a long -n option.CVE-2000-00565.0IMail IMONITOR status.cgi CGI script allows remote attackers to cause a denial of service with many calls to status.cgi.CVE-2000-00577.5Cold Fusion CFCACHE tag places temporary cache files within the web document root, allowing remote attackers to obtain sensitive system infoCVE-2000-00585.0Network HotSync program in Handspring Visor does not have authentication, which allows remote attackers to retrieve email and files.CVE-2000-005910.0PHP3 with safe_mode enabled does not properly filter shell metacharacters from commands that are executed by popen, which could allow remoteCVE-2000-00605.0Buffer overflow in aVirt Rover POP3 server 1.1 allows remote attackers to cause a denial of service via a long user name.CVE-2000-006110.0Internet Explorer 5 does not modify the security zone for a document that is being loaded into a window until after the document has been loCVE-2000-006210.0The DTML implementation in the Z Object Publishing Environment (Zope) allows remote attackers to conduct unauthorized activities.
CVE-2000-0050: Medium severity, CVSS 4.6 | Vulnix