← All advisories

Unrated severityNVD Advisory· Published Dec 19, 2000· Updated Sep 23, 2026

CVE-2000-0811

CVE-2000-0811

Description

Auction Weaver 1.0 through 1.04 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the username or bidfile form fields.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6

Auction Weaver/Auction Weaverllm-create
Range: 1.0 - 1.04
CGI Script Center/Auction Weaver5 versions
cpe:2.3:a:cgi_script_center:auction_weaver:1.0:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:cgi_script_center:auction_weaver:1.0:*:*:*:*:*:*:*
- cpe:2.3:a:cgi_script_center:auction_weaver:1.01:*:*:*:*:*:*:*
- cpe:2.3:a:cgi_script_center:auction_weaver:1.02:*:*:*:*:*:*:*
- cpe:2.3:a:cgi_script_center:auction_weaver:1.03:*:*:*:*:*:*:*
- cpe:2.3:a:cgi_script_center:auction_weaver:1.04:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.