CVE-2000-0810: Cgi Script Center Auction Weaver

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

Auction Weaver 1.0 through 1.04 does not properly validate the names of form fields, which allows remote attackers to delete arbitrary files and directories via a .. (dot dot) attack.

Affected products

• Cgi Script Center Auction Weaver: version 1.0 only; version 1.01 only; version 1.02 only; version 1.03 only; version 1.04 only

Published 2000-12-19. Last modified 2026-09-23.