Skip to content

CVE-2000-0686

Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a ...

5.0 Medium

CVE-2000-0686 is a medium vulnerability (CVSS 5.0) in Cgi Script Center Auction Weaver, published September 21, 2000. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.45%, the 73rd percentile. No source names a fixed version.

Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the fromfile parameter.

Exploit likelihood

1.45%Up 0.4 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the fromfile parameter.

Record: CVE-2000-0686
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Updated: 2026-11-02

CVE List No score

Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the fromfile parameter.

Record: CVE-2000-0686
Updated: 2026-11-02

EUVDEUVD-2000-0682 No score

Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the fromfile parameter.

Record: EUVD-2000-0682
Updated: 2026-11-03

GitHub AdvisoriesGHSA-jghw-mw88-pq53 No score

Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a ...

Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the fromfile parameter.

Record: GHSA-jghw-mw88-pq53
Updated: 2026-11-02

Affected products

cgi script center auction weaver

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD

References