Unscored severity · published Jun 16, 2003
CVE-2003-0277
Directory traversal vulnerability in normal_html.cgi in Happycgi.com Happymall 4.3 and 4.4 allows remote attackers to read arbitrary files via
–
CVSS
8.1%
EPSS
No
On KEV
Description
Directory traversal vulnerability in normal_html.cgi in Happycgi.com Happymall 4.3 and 4.4 allows remote attackers to read arbitrary files via .. (dot dot) sequences in the file parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)8.1% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HA
Happymall · Happycgi
4.3; 4.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2003-0277
CVE.org
https://www.cve.org/CVERecord?id=CVE-2003-0277
marc.info
http://marc.info/?l=bugtraq&m=105276130814262&w=2
www.securityfocus.com
http://www.securityfocus.com/bid/7559
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/11987
More from Happymall
–
CVE-2003-0243
Happycgi.com Happymall 4.3 and 4.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter for the (1) normal_html.cgi or (2)…