Description

The default configuration of Apache 1.3.12 in SuSE Linux 6.4 allows remote attackers to read source code for CGI scripts by replacing the /cgi-bin/ in the requested URL with /cgi-bin-sdb/.

Remediation

References

CVE-2000-0868

Related Vulnerabilities

Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-34626)

WordPress Plugin Bitcoin/AltCoin Payment Gateway for WooCommerce & Multivendor store/shop Cross-Site Scripting (1.6.0)

PHP Other Vulnerability (CVE-2015-6834)

Ruby on Rails CVE-2018-16477 Vulnerability (CVE-2018-16477)

Piwigo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-5608)

Severity

Medium

Classification

CVE-2000-0868

Tags

Missing Update Known Vulnerabilities