CVE-2001-1138: Randy Parker Power Up Html

High severity, CVSS 7.5. EPSS: 10.3% chance of exploitation in the next 30 days.

Directory traversal vulnerability in r.pl (aka r.cgi) of Randy Parker Power Up HTML 0.8033beta allows remote attackers to read arbitrary files and possibly execute arbitrary code via a .. (dot dot) in the FILE parameter.

Affected products

• Randy Parker Power Up Html: version 0.8033_beta only

Published 2001-09-07. Last modified 2026-06-16.