generate.cgi in SIX-webboard 2.01 and before allows remote attackers to read arbitrary files via a dot dot (..) in the content parameter.
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: mitre

Published: 2002-03-15T05:00:00

Updated: 2017-12-18T21:57:01

Reserved: 2002-03-15T00:00:00


Link: CVE-2001-1115

JSON object: View

cve-icon NVD Information

Status : Modified

Published: 2001-08-13T04:00:00.000

Modified: 2017-12-19T02:29:33.753


Link: CVE-2001-1115

JSON object: View

cve-icon Redhat Information

No data.