Description

Apache 1.3.20 with Multiviews enabled allows remote attackers to view directory contents and bypass the index page via a URL containing the "M=D" query string.

Remediation

References

CVE-2001-0731

Related Vulnerabilities

Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-16687)

WordPress Plugin Maps Widget for Google Maps-Google Maps Builder Security Bypass (4.16)

Drupal Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2008-0272)

WordPress 'wp-admin/admin.php' Module Configuration Security Bypass Vulnerability (0.6.2 - 2.8)

WordPress Plugin McAvoy Cross-Site Scripting (0.1.0)

Severity

Medium

Classification

CVE-2001-0731

Tags

Missing Update Known Vulnerabilities