CVE-2001-1138

None

CVSS

—

EPSS

10.3%

Published

Sep 7, 2001

CISA due date

—

The record

Directory traversal vulnerability in r.pl (aka r.cgi) of Randy Parker Power Up HTML 0.8033beta allows remote attackers to read arbitrary files and possibly execute arbitrary code via a .. (dot dot) in the FILE parameter.

Affected packages

Ecosystem	Package	Introduced	Fixed