CVE:CVE-2002-1600
CNNVD:CNNVD-200201-004
Mike Spice's My Classifieds (classifieds.cgi) 1.3之前版本存在目录遍历漏洞。远程攻击者借助category参数覆盖任意文件。
solution:Upgrade mike_spice my_classifieds to a higher version than 1.0,1.1,1.2,and avoid the version 1.0,1.1,1.2