CVE-2001-1344: Cgicentral Webstore 400

High severity, CVSS 7.5. EPSS: 2.9% chance of exploitation in the next 30 days.

WSSecurity.pl in WebStore allows remote attackers to bypass authentication by providing the program with a filename that exists, which is made easier by (1) inserting a null character or (2) .. (dot dot).

Affected products

• Cgicentral Webstore 400: version 4.14 only
• Cgicentral Webstore 400cs: version 4.14 only

Published 2001-06-12. Last modified 2026-06-16.