CVE:CVE-2000-0686
CNNVD:CNNVD-200010-034
Auction Weaver CGI script 1.03及其之前的版本存在漏洞。远程攻击者可以借助fromfile参数中的..（点 点）攻击读取任意文件。
solution:Upgrade cgi_script_center auction_weaver to a higher version than 1.02,and avoid the version (,1.02]