Vulnerability Details CVE-2000-1005
Directory traversal vulnerability in html_web_store.cgi and web_store.cgi CGI programs in eXtropia WebStore allows remote attackers to read arbitrary files via a .. (dot dot) attack on the page parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.041
EPSS Ranking 88.1%
CVSS Severity
CVSS v2 Score 5.0
References
Products affected by CVE-2000-1005
-
cpe:2.3:a:extropia:extropia_webstore:1.0
-
cpe:2.3:a:extropia:extropia_webstore:2.0