Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2001-0780

EPSS 2.34% · P85
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2001-0780

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Directory traversal vulnerability in cosmicpro.cgi in Cosmicperl Directory Pro 2.0 allows remote attackers to gain sensitive information via a .. (dot dot) in the SHOW parameter.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Directory Pro 泄露文件内容漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
CVE(CAN) ID: CAN-2001-0780 Webdirectory Pro 是 Cosmicperl 开发的web 应用程序。它是一个 CGI 脚本，脚本名为directorypro.cgi。 Webdirectory Pro 对用户输入没有作很好的检查，存有漏洞。这使得敏感信息可能会泄露给攻击者。问题的原因是该脚本对 show变量没有作合适的检查，对用户输入数据中的 NULL 字节缺乏检查。结果是可以输出任何 web 服务器可读的文件的内容。 <* 来源：Marshal (marshal@m
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2001-0780

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2001-0780

Please Login to view more intelligence information

Same Patch Batch · n/a · 2001-10-12 · 45 CVEs total

CVE-2001-0778OmniHTTPd源代码获得漏洞
CVE-2001-0783Cisco TFTPD Server 目录遍历漏洞
CVE-2001-0782KDE ktvision特权提升漏洞
CVE-2001-0785AMLServer 目录遍历漏洞
CVE-2001-0789Sendmail Kaspersky KAV格式字符串漏洞
CVE-2001-0790Specter IDS服务拒绝（CPU消耗）漏洞
CVE-2001-0791Windows NT的Trend Micro InterScan VirusWall更改配置漏洞
CVE-2001-0794A-FTP Anonymous FTP Server缓冲区溢出漏洞
CVE-2001-0795Perception LiteServe 脚本源代码泄漏
CVE-2001-0788AMLServer 泄漏物理路径
CVE-2001-0781SpoonFTP缓冲区溢出漏洞
CVE-2001-0777Omnicron OmniHTTPD PHP 拒绝服务漏洞
CVE-2001-0776DynFX MailServer POP3d拒绝服务漏洞
CVE-2001-0775xloadimage 缓冲区溢出漏洞
CVE-2001-0772HP-UX Common Desktop Environment (CDE)模块缓冲区溢出漏洞
CVE-2001-0771Spytech SpyAnywhere未经授权管理员访问漏洞
CVE-2001-0768GuildFTPD 口令明文保存漏洞
CVE-2001-0767GuildFTPD 目录遍历漏洞
CVE-2001-0766MacOS X Client Apache文件保护绕过漏洞
CVE-2001-0762su-wrapper缓冲区溢出漏洞

Showing top 20 of 45 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2001-0780

No comments yet

Leave a comment