Cgi Script Center Auction Weaver — known CVE vulnerabilities

Every CVE whose affected-product data names Cgi Script Center Auction Weaver, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2000-0687 — CVSS 10.0 (critical): Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the catdir…
• CVE-2000-0690 — CVSS 10.0 (critical): Auction Weaver CGI script 1.02 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the fromfile…
• CVE-2000-0810 — CVSS 7.5 (high): Auction Weaver 1.0 through 1.04 does not properly validate the names of form fields, which allows remote attackers to delete arbitrary…
• CVE-2000-0686 — CVSS 5.0 (medium): Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the fromfile…
• CVE-2000-0811 — CVSS 5.0 (medium): Auction Weaver 1.0 through 1.04 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the username or bidfile form…