CVE:CVE-2000-0690
CNNVD:CNNVD-200010-048
Auction Weaver CGI script 1.02及其之前的版本存在漏洞。远程攻击者可以借助fromfile参数中的shell元字符执行任意命令。
solution:Upgrade cgi_script_center auction_weaver to a higher version than 1.0,1.02,and avoid the version 1.0,1.02