Vulnerability Database

308,681

Total vulnerabilities in the database

CVE-2002-0680

Directory traversal vulnerability in GoAhead Web Server 2.1 allows remote attackers to read arbitrary files via a URL with an encoded / (%5C) in a .. (dot dot) sequence. NOTE: it is highly likely that this candidate will be REJECTED because it has been reported to be a duplicate of CVE-2001-0228.

Published: Jul 23, 2002
Updated: Nov 9, 2025
CVE: CVE-2002-0680
Severity: Medium
Exploit:

CVSS v2:

Severity: Medium
Score: 5
AV:N/AC:L/Au:N/C:P/I:N/A:N

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
goahead_software / goahead_webserver	2.1.1	2.1.1.x
goahead_software / goahead_webserver	2.1.5	2.1.5.x
goahead_software / goahead_webserver	2.1.2	2.1.2.x
goahead_software / goahead_webserver	2.1.4	2.1.4.x
orange_software / orange_web_server	2.1	2.1.x
goahead_software / goahead_webserver	2.1.3	2.1.3.x
montavista_software / hard_hat_linux	1.0	1.0.x

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo