CVE-2001-0212

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Directory traversal vulnerability in HIS Auktion 1.62 allows remote attackers to read arbitrary files via a .. (dot dot) in the menue parameter, and possibly execute commands via shell metacharacters.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published
Jun 2, 2001
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2001

CVE-2001-021310.0Buffer overflow in pi program in PlanetIntra 2.5 allows remote attackers to execute arbitrary commands.CVE-2001-02145.0Way-board CGI program allows remote attackers to read arbitrary files by specifying the filename in the db parameter and terminating the filCVE-2001-02155.0ROADS search.pl program allows remote attackers to read arbitrary files by specifying the file name in the form parameter and terminating thCVE-2001-02167.5PALS Library System pals-cgi program allows remote attackers to execute arbitrary commands via shell metacharacters in the documentName paraCVE-2001-02175.0Directory traversal vulnerability in PALS Library System pals-cgi program allows remote attackers to read arbitrary files via a .. (dot dot)CVE-2001-021810.0Format string vulnerability in mars_nwe 0.99.pl19 allows remote attackers to execute arbitrary commands.CVE-2001-02192.1Vulnerability in Support Tools Manager (xstm,cstm,stm) in HP-UX 11.11 and earlier allows local users to cause a denial of service.CVE-2001-02207.2Buffer overflow in ja-elvis and ko-helvis ports of elvis allow local users to gain root privileges.CVE-2001-02217.2Buffer overflow in ja-xklock 2.7.1 and earlier allows local users to gain root privileges.CVE-2001-02221.2webmin 0.84 and earlier allows local users to overwrite and create arbitrary files via a symlink attack.CVE-2001-022310.0Buffer overflow in wwwwais allows remote attackers to execute arbitrary commands via a long QUERY_STRING (HTTP GET request).CVE-2001-02245.0Muscat Empower CGI program allows remote attackers to obtain the absolute pathname of the server via an invalid request in the DB parameter.
CVE-2001-0212: High severity, CVSS 7.5 | Vulnix