Vulnerabilities > CVE-2001-1344 - Authentication Bypass vulnerability in Cgicentral Webstore 400 and Webstore 400Cs
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
WSSecurity.pl in WebStore allows remote attackers to bypass authentication by providing the program with a filename that exists, which is made easier by (1) inserting a null character or (2) .. (dot dot).
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 2 |
Exploit-Db
description | cgiCentral WebStore 400 Administrator Authentication Bypass Vulnerability. CVE-2001-1344 . Remote exploit for cgi platform |
id | EDB-ID:20914 |
last seen | 2016-02-02 |
modified | 2001-05-06 |
published | 2001-05-06 |
reporter | Igor Dobrovitski |
source | https://www.exploit-db.com/download/20914/ |
title | cgiCentral WebStore 400 Administrator Authentication Bypass Vulnerability |