Vulnerabilities > CVE-2001-0217 - Remote Command Execution vulnerability in Mnscu Pals Webpals 1.0
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
NONE Availability impact
NONE Summary
Directory traversal vulnerability in PALS Library System pals-cgi program allows remote attackers to read arbitrary files via a .. (dot dot) in the documentName parameter.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 |
Exploit-Db
description | PALS Library System WebPALS 1.0 pals-cgi Traversal Arbitrary File Read. CVE-2001-0217. Remote exploit for cgi platform |
id | EDB-ID:20631 |
last seen | 2016-02-02 |
modified | 2001-02-02 |
published | 2001-02-02 |
reporter | cuctema |
source | https://www.exploit-db.com/download/20631/ |
title | PALS Library System WebPALS 1.0 pals-cgi Traversal Arbitrary File Read |
Nessus
NASL family | CGI abuses |
NASL id | PALS_CGI.NASL |
description | The |
last seen | 2020-06-01 |
modified | 2020-06-02 |
plugin id | 10611 |
published | 2001-02-13 |
reporter | This script is Copyright (C) 2001-2018 Tenable Network Security, Inc. |
source | https://www.tenable.com/plugins/nessus/10611 |
title | PALS Library System WebPALS pals-cgi Multiple Vulnerabilities |
code |
|