CVE-2001-0842

  • Last update: Apr 13, 2023

Description

Directory traversal vulnerability in Search.cgi in Leoboard LB5000 LB5000II 1029 and earlier allows remote attackers to overwrite files and gain privileges via .. (dot dot) sequences in the amembernamecookie cookie.

Software From Fixed in
leoboard / lb5000 - 1029.x

Details

    • Severity: High
  • CVE: CVE-2001-0842
  • Published: Dec 6, 2001
  • Updated: Apr 13, 2023
  • Exploit:

CVSS v2

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P