Includer.cgi: >> Includer.cgi Security Vulnerabilities
Directory traversal vulnerability in includer.cgi in The Includer allows remote attackers to read arbitrary files via (1) a .. (dot dot) or (2) a full pathname in the URL.
CVSS Score
5.0
EPSS Score
0.002
Published
2005-05-02
includer.cgi in The Includer allows remote attackers to read arbitrary files via a full pathname in the argument, a similar vulnerability to CVE-2005-0801.
CVSS Score
5.0
EPSS Score
0.003
Published
2005-05-02
Cross-site scripting (XSS) vulnerability in includer.cgi script in The Includer allows remote attackers to inject arbitrary web script or HTML via the argument.
CVSS Score
4.3
EPSS Score
0.003
Published
2005-05-02